Analysis
- max time kernel
122s - max time network
127s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
30/05/2024, 13:59
Behavioral task
behavioral1
Sample
8463d2441579b74ba5511fde7af414cb_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8463d2441579b74ba5511fde7af414cb_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 8463d2441579b74ba5511fde7af414cb_JaffaCakes118.pdf
- Size 42KB
- Sample240530-rajbmaca84
- SHA256 b37e008334e4282cc529947675cc68bc3aadb91445ba0598ebc9f05c1e4b5352
- MD5 8463d2441579b74ba5511fde7af414cb
- SHA1 4f0b3275ee1e97e7761316618b36aa53f0683ca6
- SHA512 2ded92c281e27ef9e402bd1f927b24e00e2235fb4ee69ddb73f9bdd30b99806cd1f2c0aeb3e31dacce925681064ffc1e0145957db92137d9bf4200d7a7580085
- SSDEEP 768:QXuMZmwgCLWar+E5HpxpDAjfb/leRuTRvXvhEGHipxiHwihghq7/7Epfbsld331x:QXFZmGWS/jpDAjfb/leRuTRfvhEGHip2
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1684 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1684 AcroRd32.exe 1684 AcroRd32.exe 1684 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8463d2441579b74ba5511fde7af414cb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1684
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 68ec5e2de5988c9235a125a409fcb3636e48e090ab6628e9ca2a33193f2c6894
- MD5 84ab4f47383b8a2d90d41959516f6346
- SHA1 3e475230dcb9d0d417fd8aa80022cdd5a7475928
- SHA512 ec7fbfc555830e7bd80a98cebd2903738136f1b268eddee3d4892afffcca00544c4b1d06a5bfde46ee7a8d31e00edc20bb5da24fef0a18c193e695b5c24370eb
- MD5 SHA1 SHA512