Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
01/06/2024, 11:38
Behavioral task
behavioral1
Sample
8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
- Size 18KB
- Sample240601-nryabsbd2z
- SHA256 55299b01c1d25c3f9bd8eeb5c2feae48d3e4fcd4b86adb1fbca4aea200899ee4
- MD5 8a5aca9f367b5b661f03f20b1e3634dd
- SHA1 ff11c797981509caa059b4ab17b46c1d095084c5
- SHA512 e8ef64d3480edc56a9361e996caef446a1d2eb0fc7b3e65638e096b3033af5c30821e8e083056f9c62601628e06704919bff5e095f5969ff8ca18e448cefb3af
- SSDEEP 384:VzrdG0Hz1T1G6o0Ta6MKeSyoD6iQAKUu6ju2+rovlddK+uUYCBchIb+fmY+ByHIh:VzrdvHz1TY6oGsLdNN17yuPrAd/736mV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1676 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 87f052375c00f43f459edd4f43cdfee55f776840733fe3ebf10c2c162e45d4d2
- MD5 bb83e35e05170fe287efba983a329fe4
- SHA1 95da91e5ee4345f62a0cf576b332f2e0a0e6cde6
- SHA512 6abfebaa496f15c710f771b4880344c278736fd37146fee4bda4b238103219719ba3c923071f4b21fdb0426b52ed54e2ac168e84b01d4e98f196e89d7430e5fd
- MD5 SHA1 SHA512