Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 19:33
Behavioral task
behavioral1
Sample
7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf
-
Size
45KB
-
MD5
7e224d9d5d1781e26735ed4124a2435f
-
SHA1
610604d93e8a7b28b4dcdd5d7a6fca058cc1b65f
-
SHA256
dd6499d6a4cdebdeac97ce7ed978f4bc643c2ed8ef1a29fa7cd033128628c2a8
-
SHA512
adfc23a2b8749a42d80148b61a760fa88cd3e88633653dea503d4a9ada53133c5997c9e084a38c30f176033d9c81b0ed4cb80b65d222bdd731b3359168b0790f
-
SSDEEP
768:hgGzpDC5LulQ5G5iH2wV8GS8dTHmwMnR+k/aRHku8cmE6ktxxPGucQosGwWI6ZqJ:SGFwTGwaZ/YEu8c8ExxP5yfI0qNK+c2H
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD568998cb3b46a0cbcbc286d406b0ba0fb
SHA1ecf9ceb347c1a237de5f1b54cff588aa6c805cbd
SHA256fed462d5e2022cac3a3652349e153fe8b10cc02e231ca852b90a2dfe71d709f2
SHA5127e8f6b86114a97f3edfc91b343267181704f67a61100b7c5d1d23a38f10b88827fdfb48a611f7346544a44731937b79e3c6dc90033825e015f39ad7bb4fc4681