Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
31-05-2024 10:11
Behavioral task
behavioral1
Sample
86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf
-
Size
66KB
-
MD5
86a3afdf95115bd1f2366943e94f9206
-
SHA1
fa7782aae8b3e02e5034da0c763957962f6aaba0
-
SHA256
8110b8a60c744235c3aa9ed680b2aec05e096b59ab90c3aefc434488e68e5a63
-
SHA512
4810519c985bc08c70763afc46e73423c025b6e2db77be0919483c4cc27bd682357f2efb4c85c2b40f145678367fe089c5d70b3cd82e19abda22b63c023a06ee
-
SSDEEP
1536:HGFypUtU6SdWIou4QpsXsncbf5rieWqRZN+1E8CHnquW9WRuVGw2ri6:mFypUtU6SdfvpsXscbf1iebNlK6RiGt3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1736 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1736 AcroRd32.exe 1736 AcroRd32.exe 1736 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1736
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD594af9849c877dd5e2d917c3b91cccf0c
SHA17743f6d6e79a1f341d54d4226cd62340ba27d1e7
SHA25669c5d64dad3018b608c373b5d6bb28a927be0eacecf06f9d317d5e43796be135
SHA512094859aa0f09dd36dcef6cad53c64c26bdef7880031f47f5bc91d77abb4d26459fcf923e46f037cd525eee70b213889dca4caf7dc8f762dcf035195836d4994f