Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
01/06/2024, 22:15
Behavioral task
behavioral1
Sample
8bf8be7a33024e012f8b108f89c83b11_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8bf8be7a33024e012f8b108f89c83b11_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 8bf8be7a33024e012f8b108f89c83b11_JaffaCakes118.pdf
- Size 38KB
- Sample240601-16feaage4x
- SHA256 1955a4ccd18ce093312471f336a2c6269fe0d484c2f8197ddc99f390dea89a73
- MD5 8bf8be7a33024e012f8b108f89c83b11
- SHA1 3b07ffb7e5f7e9498c6f2e43b688f27e7cd0de41
- SHA512 2f4ede12db3596a88372a0b0d7a3be170b5f74fd362be44e4b5792bc55488eea2093c66c56f9accf4ea9011567cc2e4ed831f06f6ee69c19b1f0060079954144
- SSDEEP 768:8gGzpDH9jp3tk2sZ5OCmhwRXs/DX2af6RIlpFkOA7UfakU2V1aOZ0it:ZGFNp39u0Fk17gakU0aOWit
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8bf8be7a33024e012f8b108f89c83b11_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 6558d0241c2694a4b997f5abb888b36410d0977f59684815e6a5b25c3294d694
- MD5 5c5a34109195c92c2b6c716e74bf20ab
- SHA1 014965f1f6325354a61f45e9f2fe46510a12b9ae
- SHA512 617e78e88ab0b4abf0febe15dcfe3277c1a9d73d19013041a6bbd9efd0539b20c1f31433d70d35151dc404d209d338194c0b4ca41b9f69365d835cd656c18370
- MD5 SHA1 SHA512