Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 16:24
Behavioral task
behavioral1
Sample
76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf
-
Size
41KB
-
MD5
76143ac8394a9313f6e0546258980bee
-
SHA1
ee7ecc285532cac4c7e3cd49d35144a8b9d48c05
-
SHA256
c67fdb6a51877f3feb2726779e13bbb6e89bc9238b349a49bc25beec2c2059dd
-
SHA512
78e86897326bcda6bdc5a8a4a824ff731397b0e1099d8d7fd7baead9a008cdf5d8407494385364723c8bac88fb6a996d552c8a152041c9efa6d8bb575e71e69f
-
SSDEEP
768:/gGzpDspvILtM41NujSerSQgbQMb47ZfFlhLfDTBVfIbgCL2ie0:IGFYpi1KfFlhLrTrJc2ie0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD576811b07ae943d2f3644ec5923bedded
SHA1f17f3d79e554a6ed4fcc3959fa054cf9954f7f15
SHA256c3163f32e353f4bd542492aad07aa7ae3e8bad865da7a7f2acc79fcce94c5f7b
SHA512b4d69416dbc1c7a55969b2ba03b1de063970ae005a9c334e0bc3f498ab85c6097ca991cb18dbf050b57112c5bde17c2eb3a4e45a64cb2a3ac1aebd5c8c058e00