Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 20:05
Behavioral task
behavioral1
Sample
8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf
-
Size
17KB
-
MD5
8b9de8c97370d76f792589c1de43e3e4
-
SHA1
eb36dfd7769a25286d7f72707ffd6d20faad598a
-
SHA256
06b47f75b408c1d5b9a6c0ce741592a04dd279651d65be01785a0e4c04591b61
-
SHA512
a542a4f03dd13f62b5cf05d9da747c045c90f7568a79892a0ae8346b631be80cf05cbb610e6cb00b4f6e636a4f997917b69a79482cda4eeaeb03f8b8a4ce28a2
-
SSDEEP
384:VzmB9C3rQ5Ozz1OiunDqJneDa4kBgBh48mLeKuPykqI1401EIdUTucY1iNnQTXsc:Vz09C30az1ZunWJnw1Ocm8mLPu6kqG5p
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2072 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2072 AcroRd32.exe 2072 AcroRd32.exe 2072 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2072
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e9c0f2d1c7a37f1a95f8a4a3c628ef3c
SHA1c77df56d24fdaebf06bff36d6af7c00256ac456c
SHA256914344708affbd43c351b520e4e52f3b2ae0458b9d34809ac92421a2b440bdfe
SHA5120516ddb44d22ac8452c8cfe33c04d6eda7ed97092645c9084043c3e583ec78523c4875c072570ea8dc57f91efed7bca22d067b47c71509aaba5662644e5e80b2