Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 03:16
Behavioral task
behavioral1
Sample
893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf
-
Size
53KB
-
MD5
893807ec153f7c12a6aa707c9abbc3da
-
SHA1
224aeaa9ad93c3f13cb3223a985181b7165d1321
-
SHA256
8a144d96e3094708e6cae82ef6f6116c017327019906edd985975ad1f44efc51
-
SHA512
358d3d8f61364a11f21f0418acadd6a318279e4b53d10634cd521f3968eeaef2a64cba162712df3c2fb083e9d65972640aa7bc91128b73b54bebee81c95e5fdc
-
SSDEEP
1536:EeM8vBROXmPkHkue5YLNb4wIcZjpjYATXFZmGWStm:EeHfkgluk9HcZCAzystm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3056 AcroRd32.exe 3056 AcroRd32.exe 3056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5349e9037a95b665d3080fdb4a42919c5
SHA1d98408e063a17d9a44c0371f241cffb56940aed8
SHA256a79bd98a3838f22130bc5581d7bec64b0200943bb930c499b604754541005779
SHA51267a484f1d2f45e47681edd4c69f12e74ecff714fcfa78d5387bc537d9cff4cc56f6946fe15ae152169549df038148d2d366829dfca3a58384e3d43a57b6cfb32