Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 09:28
Behavioral task
behavioral1
Sample
83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf
-
Size
40KB
-
MD5
83ba067ec0a110be39741973cd245cb0
-
SHA1
176eeb7ea26e4fd6d500481bf0fce21a98b04b4c
-
SHA256
5cb1d8f4b83b644ee9e7e568b1f3c0c3703cd607e7ffb21dd7b559135a76b7b4
-
SHA512
3ce3e75b234c96ac655f49aee7d840dd96451afd6845ca31b89ecd82df73dadbda69f59a124ac9a7dae2959446cd4884253da1884f4b65c673267ab4a6bd1afa
-
SSDEEP
768:6gGzpDEp1mCyK4LKm8u2zf62S93aUJSLo8l2jK0VaYpwAFDcb9vHV1LKELECJ2HY:nGFIpo3XJ03l2mqaYpI9vHDLbLECgHPw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d2237e6ab896b438c70ae6058dac9d52
SHA10ae68d4bf5d04096664df793f2b4bf09789f53b1
SHA256b8e27006136b9e020b72cff0c31edd42f0bc90bbfb46454fa2f7582972f5fe98
SHA51217a5c232ac940d6402b85fd963313a71ac1ef2fc420de1e5cd61eab3d6ceb30869b8d9506bb709f7e3212838a5c793069a36d87c189420c06aab8e14ec5169eb