Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 20:53
Behavioral task
behavioral1
Sample
76cbce16d60dcf598af565f888211b75_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
76cbce16d60dcf598af565f888211b75_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
76cbce16d60dcf598af565f888211b75_JaffaCakes118.pdf
-
Size
97KB
-
MD5
76cbce16d60dcf598af565f888211b75
-
SHA1
302b80be820a49540ea08c8defbbd498b1a88d3f
-
SHA256
b7e625303140e921cb16b1ddbb935f254a8e683467072b42fbb517209215ed6e
-
SHA512
2fc13f18f45a206a90579732de20bf789e286b5afdd5e2e68763f3bd4ae562ea3e5ef3fcf8f3393640e4b63ec05ddd645910701dc2afee4271e6ba3fd8e94db7
-
SSDEEP
3072:KF+1SqKUIc8gn1eZycDaGTitfZIjbmrgIZm+OtZ:arqLF1eZycMcbqAj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2036 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2036 AcroRd32.exe 2036 AcroRd32.exe 2036 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76cbce16d60dcf598af565f888211b75_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2036
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53d31f105bf21ce0245250a61a552fe11
SHA1c509f2219d90a90960faaa938632799c251b90a1
SHA25698b291cba9bd102fa951cba7de2f4736b78ad7a7f11eec7a2c6ced1b391a0869
SHA512defeabce4df1fbd57a7647b99b299d75b8e03dea113a76ddaa317da59ecce14ccfbb7ca9a4c4742e05402edc17d83999d20d79b46f925bedd5257af5b5a7d09a