Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
30/05/2024, 11:31
Behavioral task
behavioral1
Sample
84143cd83aaa66fd999c58f26994d21e_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
84143cd83aaa66fd999c58f26994d21e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 84143cd83aaa66fd999c58f26994d21e_JaffaCakes118.pdf
- Size 39KB
- Sample240530-nmvnmsgf56
- SHA256 3bc3408ec86db3e7292197a56cd17c978f031209aa7b4d5ea04305eec9fc044b
- MD5 84143cd83aaa66fd999c58f26994d21e
- SHA1 6c0c1b3d16a88abbc3fb726f65e56f3209ab9ed0
- SHA512 1bf60bb6e0b1ae797a59f36ee00d931125a4c31367f6f0305823fb8f79d5b82ebdc6aecb701341bcb94b4141571b2c4fd1a05db2aaff352817a1a6ceaee9179d
- SSDEEP 768:tgGzpDFpjYn3F19LvhHHZ6oSRAIw3uN6QbYg+unULqLVOL7KU6/LxVriao:OGFZpsLGAIEu1J+sULkVOXKhPriB
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2972 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2972 AcroRd32.exe 2972 AcroRd32.exe 2972 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\84143cd83aaa66fd999c58f26994d21e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 c319b4a617ca622fb8e41132bd531359c2b74590e809e0d29e1a3b1c218a45c8
- MD5 f0e85423c337907beef38e3c7eb8019a
- SHA1 3ef8711af71687293289b0482d44749cd7938768
- SHA512 1023e9ad66a74d16990ad7fd0ca51ddc312b9bbcdb6936ebc3c52a2e0f47613b32b8e6d1b45fb331b61a1aaba9a63ba26f8c2901b98495bd2b8e9a3832cb36c3
- MD5 SHA1 SHA512