Analysis
- max time kernel
119s - max time network
125s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
31/05/2024, 11:05
Behavioral task
behavioral1
Sample
86c7b56f4bd7237d94e05cfe9db1f296_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
86c7b56f4bd7237d94e05cfe9db1f296_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 86c7b56f4bd7237d94e05cfe9db1f296_JaffaCakes118.pdf
- Size 188KB
- Sample240531-m7b7csfd3w
- SHA256 855afee26176321e18f080114cca0a8f020b1b1a0a52478da485bdd19e7289b7
- MD5 86c7b56f4bd7237d94e05cfe9db1f296
- SHA1 f4d459fcc9d60dac776c0a03614062457636c645
- SHA512 88c9c1e1c762f610ec9621bb0c983a01efc67114470cafe54b31715bb3b278b6445520b045141f0fa0b27d6fc26005597d3b9099ef0e16ae50fc816026de67cc
- SSDEEP 3072:g2irbxzGAFYDMxud7fKg3dXVmbOn5uw6KjnHRrfPcRkLsPvMkOW/S6:g2MKlWQ7Sg3d4bOpxrnIP0kv
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1208 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1208 AcroRd32.exe 1208 AcroRd32.exe 1208 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86c7b56f4bd7237d94e05cfe9db1f296_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 2fa3552e3d068992b4b28655853af795fbd386c3d665e695b72fcae20a9dd5ba
- MD5 cedc9fd9fc7280cc799388c5b5850172
- SHA1 de5edc002265d709b056b37d2fb9eb2f437c3c73
- SHA512 5357bfaf258b439927844159c452bc6a43c94181fa6b55ddb499339d38accd8c82330985c384a35ea6863a5f0af508738074c1e658039c2e3a3ba9c03770519d
- MD5 SHA1 SHA512