Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 19:09
Behavioral task
behavioral1
Sample
72f5ca8dca2ce15d35ba381557008e0b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
72f5ca8dca2ce15d35ba381557008e0b_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
72f5ca8dca2ce15d35ba381557008e0b_JaffaCakes118.pdf
-
Size
41KB
-
MD5
72f5ca8dca2ce15d35ba381557008e0b
-
SHA1
bc5345e7bc5ac50a798753183b89495476001080
-
SHA256
bdab7220541763279568b260e1b3c3f73060ef84d555fe015758374abd474a9c
-
SHA512
16d7dedd5a15337e2a568d4d6f9b9decab771c5ac88d72009d33db881dc9e740a296719ca8d6d18500c5b668a9133dafbb951c30027c23aa8ee6b8b8d60e6a26
-
SSDEEP
768:/gGzpDzpH5oMB182lbvWkivEDsTZiWcp+Eatmi8wc+oAjvcpcWSisZdUS5MNH7kw:IGF3pH/aXvEssWc4Eatpq+IrdsZdTq77
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2472 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2472 AcroRd32.exe 2472 AcroRd32.exe 2472 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\72f5ca8dca2ce15d35ba381557008e0b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2472
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51ab1e2afa7aa6d466b560bcc07feb222
SHA103080b61640579e5c4da9acea0bff705d7ff4dee
SHA25623c5a691df4c25c4029785fa21c41b1630fa17a6e6665bb4edad044777f991a7
SHA512380e6c051a2b1e6656900f0a1d1118b77785e217b899d3a12f1467783abf7874a3f6a783c4bdeb4b8dc79cc4b3e8cbbb62a9512a4ffe2ac5c5d350707b2c1252