Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 21:41
Behavioral task
behavioral1
Sample
7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf
-
Size
40KB
-
MD5
7355e7574113c68c1a187b21376460aa
-
SHA1
1b2a3cb750f2b034b248eedbed33a7e26d04e4af
-
SHA256
47904b30ad16ce9b17c8303c541f13fd0ed74bcdde980f812d85d37408fbcb8c
-
SHA512
ab3bf50b8d4557dc2af68f7dca7d1bc026272cb3a1b6dd4fc30ddc3246af7efa8ebffc1b67dc77e2fce95606c6a62e43cfdee28565703fcbe77ccc02acb3f2fe
-
SSDEEP
768:WgGzpDepjcrkNsKQ7gARNJ98sovtCa2gmXgWApUq+A0haZZqcBAqgatZuI:DGFypjgkGKYJ9z02JJc+A0YDqqARatZz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2096 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2096 AcroRd32.exe 2096 AcroRd32.exe 2096 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2096
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD511a17afa668cea876cc04248a0fd0f46
SHA1dbbdac09c730d85ac003843027fee1951d430d10
SHA2563c539edf63f1d8cf0bb91f6ad85ef77424a295e689c46443aca5fff2c32fc20b
SHA512990e8ab99e2d8586de0172efad082c9782c629d3c661c66e5f42875225420dfa9b1df648defc9eaf37658e2c3f5782274fd69be8c1056b189e473e4561d43055