Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system - submitted
01/06/2024, 22:21
Behavioral task
behavioral1
Sample
8bfd1642e6cfd22f0a8c12ba391a1944_JaffaCakes118.pdf
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8bfd1642e6cfd22f0a8c12ba391a1944_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 8bfd1642e6cfd22f0a8c12ba391a1944_JaffaCakes118.pdf
- Size 41KB
- Sample240601-193zragf7x
- SHA256 ba55b0d5086ff0b8413bb94dba1715f241c728146d802620233a70859a94375f
- MD5 8bfd1642e6cfd22f0a8c12ba391a1944
- SHA1 65f26f74196ef5c7053ba37ab2feb41dcbc4189f
- SHA512 c38867d0e00d3363cce436f21a810abcc99f4d8a0f1a1e3229dcf321a0da8f99b87b6506348fe7fbf5d5d6c5d48a9593448989f88ce0b9b036adad3c0b94c65e
- SSDEEP 768:TgGzpDfpadt3xUiTcbOmcxX+PkoA6BkshbzWrh3dQb9et46aUEOMfH5vcL:sGFjp6J+hLJgts9et49OQH5EL
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3004 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3004 AcroRd32.exe 3004 AcroRd32.exe 3004 AcroRd32.exe 3004 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8bfd1642e6cfd22f0a8c12ba391a1944_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3004
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 4d7289cbf760dac9885106af5b8f995de878a84d6a23cd51d1dfe730a0a29d2d
- MD5 b2d7add40b133c302294d32c96365f98
- SHA1 41dc7b5b77585d7d619bfbbb82cf89d6283d6641
- SHA512 faeb6c2f7db8e82297f68d77ef3a1ca2a9819b05864e0a566c6691e9341d558b8a159289e6e14c0fec0e98065d59680e36e72e89e421afa61fd5d865cab9d799
- MD5 SHA1 SHA512