Analysis
- max time kernel
121s - max time network
126s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
30/05/2024, 14:37
Behavioral task
behavioral1
Sample
847f67a7289abb9d682f14b18fc71312_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
847f67a7289abb9d682f14b18fc71312_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 847f67a7289abb9d682f14b18fc71312_JaffaCakes118.pdf
- Size 32KB
- Sample240530-ry481ach54
- SHA256 1b7fea9daf2f60b7e62b7e7bf774e793e1f3705be14ccc76d5fd0365e4b6c92b
- MD5 847f67a7289abb9d682f14b18fc71312
- SHA1 ef600ce981464b8b837cb8ffcf28feaad861da7c
- SHA512 227a3ef714b4faad5ab5469b6f9c06188ebfbb14099e4f1e2a50773742dd5cbf4a05707189b3af1eb61ab77c844000ed5cd854fd35d40b3d3288beb90d43f071
- SSDEEP 768:KXuMZmwgCLWarLE5HpxZ2GhvsTJrrZqwcARz:KXFZmGWSEjZ7hvsTJrrswVRz
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2228 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2228 AcroRd32.exe 2228 AcroRd32.exe 2228 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\847f67a7289abb9d682f14b18fc71312_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2228
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 b728452117db9d6e7d10f671178b6745038762d2469671b4ae360b46d80bbfa9
- MD5 5b7da8f4636ac0e60eeecef9f0bc4481
- SHA1 ea7da25b22ce6aebab944fd351d02b8cad1cd71d
- SHA512 420193e5eade53edb5dd462bba30653bb84aca7ad32e69ebe56b62c1e89f82b362702209c7c66dc98591584360eada8572d80b7aeb12706b51c7cddedd555662
- MD5 SHA1 SHA512