Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
27/05/2024, 04:27
Behavioral task
behavioral1
Sample
77e5bcd8503bea54f38f395f11146215_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
77e5bcd8503bea54f38f395f11146215_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 77e5bcd8503bea54f38f395f11146215_JaffaCakes118.pdf
- Size 12KB
- Sample240527-e2589ahb33
- SHA256 1286656cc2d62728084d8c2272cc40f39a591861ab4c2cd76931ef85a124f33e
- MD5 77e5bcd8503bea54f38f395f11146215
- SHA1 10d7a51e01b490f262b2094275c693804d0cf850
- SHA512 715478b1c73efa79a130926c942e73aefb27866c03d65a1110f32e494df641dc9e997baa44a4d7f0ea998ab560e7929d3e45562ac0d17ee8c1bc0849c94e825a
- SSDEEP 384:WyrX9yXx0l1tQ+cvMjcSefXRTrS54D2HcJ+GVfzBYQCuXEU:WyrMx6Q+cEjJKQ544cLFYQ4U
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2072 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2072 AcroRd32.exe 2072 AcroRd32.exe 2072 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77e5bcd8503bea54f38f395f11146215_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2072
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 8078a7a9cf2cd944ff46b4703cee38d27ae33561322255a40788ec04eecbf5fd
- MD5 fb74513d54b10ec2196dcaf91699d134
- SHA1 5485337dcaf516bc7068b087a9542a275af0dde0
- SHA512 e79be1c02a010f723f0dc8dfb8d49b9a71ae23ba5ed6dc1a25197d8845c4a5574c189367f7eb3b633ff76095912ea544e4117903ae8f598deebeef771fd6a20f
- MD5 SHA1 SHA512