Analysis
- max time kernel
120s - max time network
120s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
31/05/2024, 06:47
Behavioral task
behavioral1
Sample
863e3e850c6c87acff63d6c323c50ffc_JaffaCakes118.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
863e3e850c6c87acff63d6c323c50ffc_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 863e3e850c6c87acff63d6c323c50ffc_JaffaCakes118.pdf
- Size 79KB
- Sample240531-hkgfcabc39
- SHA256 3dc736fc9606518c7693196d97c05678a7c8b20178dd14e48a95d0f5df19fbf2
- MD5 863e3e850c6c87acff63d6c323c50ffc
- SHA1 9f2d7396234ad0236c5b78cae3ff1e386f52c055
- SHA512 f7af7106eb641484c8b4f32b8b97b2494b91aa21cbaa7ff80c805f0785282cdd644edb8eb69fda3fda2e75dfeb08f2645614d52662556e02119c5316b6c78b91
- SSDEEP 1536:2nGFgSAI/472KTUFhdAnYfU+ADRqkKZlcYG+W1q8uYEg7S:2GFg0w7tQdAvbEk6l7GAR
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2340 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2340 AcroRd32.exe 2340 AcroRd32.exe 2340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\863e3e850c6c87acff63d6c323c50ffc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 020ccc1fb63bf9f74da76bfaf565c65a3c21f9081fc4e80fc31b64b6d2552a5e
- MD5 fb0cfc523a71905ad36fa2afb4b8d284
- SHA1 3a61edbfd7e9a4d66254e3a421b8b1b71dab5130
- SHA512 66b2037845af3133c52bfab4e8dd07490f45a75cf00ae55d914bb6eadab02c5a81931b77467ca4a811d421785e06cc3bbfb13c73faf5288d126bc5117e94c4d9
- MD5 SHA1 SHA512