Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-05-2024 06:40
Behavioral task
behavioral1
Sample
7fd0e360d5a87012ea19804cf021532f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7fd0e360d5a87012ea19804cf021532f_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
7fd0e360d5a87012ea19804cf021532f_JaffaCakes118.pdf
-
Size
186KB
-
MD5
7fd0e360d5a87012ea19804cf021532f
-
SHA1
a8f52de95154e016259276ab4a8ee2b9de8dda1a
-
SHA256
a6778b2514d6c36e462cf98223e3696a76688eb705844ebbf73d8c4af529767b
-
SHA512
cfb86be6f2f20af07c90831747fb8e1e27bd68c5d45885f75a7ee85e620dde99577ec83046149d991170ba2dd21a9f7e923804a453bc19ef79d674769763939e
-
SSDEEP
3072:J2irbxzGAFYDMxud7fKg3dXVmbOn5uS6Kjni2CAXYcwzLmh1qvI5ZvlSd:J2MKlWQ7Sg3d4bOHi2ClcwfmQ8O
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7fd0e360d5a87012ea19804cf021532f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57133a827152ad2b525004b15a2f25966
SHA1293bcbc8ceb03852f8a69f9d2b350249608dced7
SHA25604468fc6478fddff6b2d043d4f73751f8a52770a0feaa67c8741d6fb08762efd
SHA512febe074628fa1d7f902a5e958184fa1407d7976b121f2fc9b94a03e4ca99c2c91a9d0c59682d732d73fa8effc7f46cc47dfdad1ca631bf841c8b5d69b38a56f6