Analysis
- max time kernel
119s - max time network
123s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
01/06/2024, 11:08
Behavioral task
behavioral1
Sample
8a48c5ab8b7fe4dbe7eab31bd3342c32_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8a48c5ab8b7fe4dbe7eab31bd3342c32_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 8a48c5ab8b7fe4dbe7eab31bd3342c32_JaffaCakes118.pdf
- Size 18KB
- Sample240601-m8zdaabf49
- SHA256 b38b3ad2bcb53646fc90c383faf1625db9c1560a5c744c0d925f6edd9f338877
- MD5 8a48c5ab8b7fe4dbe7eab31bd3342c32
- SHA1 ccec677f21aab5151115a9cc5d063def2e44ff35
- SHA512 d8c1f0fd6bb4971512a9477fb48e97f8e40d14708f393725575cc5d55ac9aac6752b3f717ea50d61cc54a75435b7fd1033837158742959026853f635eeeea6b6
- SSDEEP 384:Vz3V8Tz5OrH5alq/DoxexJxXHFombdiwGhAqZnqOZ5M7o81ZL8fQl9j6valr3:VzFqz5MZalq/DoxexJxXHFombdiwGhVG
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2980 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2980 AcroRd32.exe 2980 AcroRd32.exe 2980 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a48c5ab8b7fe4dbe7eab31bd3342c32_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2980
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 93f36532ccce6296aaa140c3ebc00f345a5a83ad1e919fea02fdf23238e9cb14
- MD5 f39a90638fd7fad61ed549b6f0959fa6
- SHA1 b22a6dc34b5cf98aa81f7a130c829c13a4d4f886
- SHA512 2909bfaded1c9523a418f45c800e0b1d193310a90614089c6d60dee9fd9b4e2e1a35805af0ae170769431c9fd1336597b8d4d7f1887bb3e7ae9cb4e925f83f4f
- MD5 SHA1 SHA512