Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 02:45
Behavioral task
behavioral1
Sample
904b81adeb0a0e79731ccfcc69bc0694_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
904b81adeb0a0e79731ccfcc69bc0694_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
904b81adeb0a0e79731ccfcc69bc0694_JaffaCakes118.pdf
-
Size
54KB
-
MD5
904b81adeb0a0e79731ccfcc69bc0694
-
SHA1
219f3e90f82ed05c32f387c142a4cf76d6a0cf1f
-
SHA256
b8f7760fae61674fb4e56f875cb5c1d40ce9ebdcfc48d11e01f157a3b932db7f
-
SHA512
4da6cd0e51f697b15c0c6464ff49d88cade799e246f94a7166772f257a94d3c7129b3cd5c2516f93742a8087a5337ce1bffe5d72a7d1f640e8a00cd035661bcc
-
SSDEEP
1536:eGFzpbR8P3qgPWTrTrhYkS72qnhldJ9RuyNW32U0XZ9:HFzpbm5+TDA72qnvnjW0T
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1752 AcroRd32.exe 1752 AcroRd32.exe 1752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\904b81adeb0a0e79731ccfcc69bc0694_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56a2fe2a61210156f4bf09fc76a01b0b7
SHA1798106410ce394f96f8ba51a72b678717680f3e8
SHA2563f5fa88c9d67ec06f29babfe1ef51a2dcdef8b7fafc19454872947a7e0bd121b
SHA512e1e42e4218e09c89c7eb60bf699d3611d2563b933e6ffa03fed26cdf7239c9f8013886a18afe1e64ce99c270b2faa4606fb063e3ce4a710f530630d087534df7