Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
02/06/2024, 02:52
Behavioral task
behavioral1
Sample
8caa099204562f166a577f2f694d1d0b_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8caa099204562f166a577f2f694d1d0b_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 8caa099204562f166a577f2f694d1d0b_JaffaCakes118.pdf
- Size 42KB
- Sample240602-dc6m2sgd8x
- SHA256 c1f12a1317157cd0f097fff5672cbb42f93eaa843ef3869371ece3c225d51cc6
- MD5 8caa099204562f166a577f2f694d1d0b
- SHA1 0f65d54a03b1fdd521782f200a7affb0d7249428
- SHA512 fd1e5986ea89b0bb6244161f7d9ef5a5b057a7003da0bd792d2a3064001c85b3c1ca63fe56f99fa4225a7400193ed555124e61b6be74105ded266d2ba39fce54
- SSDEEP 768:LXuMZmwgCLWarLE5HpxIRfOnRUT7tfh2VxRU2fAf5InAaoddXB3PaxEsVid082:LXFZmGWSEjQfOnRUT7tfh2VxRU2fAxGX
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2180 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2180 AcroRd32.exe 2180 AcroRd32.exe 2180 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8caa099204562f166a577f2f694d1d0b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 382e33e37dbb557c7bf465ad862306c13b23a418b1cd176a2739c4619e019f72
- MD5 d3b927945589f6e84988e4c26bbb4952
- SHA1 32e2b566487674a8b5cb900a2cd94a9d3fc29f08
- SHA512 dc8e2276487d2668393c82ef3baa0fdc6d1492c57a2407b19854257a0fa4e4df085e51bf220336d823cbf7563433f7ec8a1c125578e3273673c389a3e69a35f5
- MD5 SHA1 SHA512