Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 02:15
Behavioral task
behavioral1
Sample
90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf
-
Size
45KB
-
MD5
90399980096f5e6b6abf4b2e8b1ed593
-
SHA1
072586d491d58b13e8a9e1d2a908bb3932e22382
-
SHA256
624b4a92c6995e8237b364c5b72298d74e06146073695dd9801c23c15c8841ec
-
SHA512
6a1fe6c38e6a6cc66d2b2ef879bfed5710173d602034318ff635719cf10538fabb0e56b7c6249e0d8cad4611aaa57065bd9549fed26ac0323d2dc4786a3d6871
-
SSDEEP
768:BGcJhslblNxeD77Sv3Bd2wt3jPCHkUy53Nf1F9FKEq+qVhYocglze+/XKn+HXeW6:ccJhsj+7Sv3CwpPCHkUy53Nf1F9FKEq8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD545937850990f999644411574c248108f
SHA17189504ad6c159376c87e8d3ca359027fde534d7
SHA2568d408d90e47dfb0bf2cb55557bd957999971062aa4c17adabf19a576f753c3f7
SHA51209ebfa32fdb93ba9b71d5a8130ce72334f7105964a2519b89cada2165af57c6b8aaa7e924b136731d5407142b45e122ef30a7a33475c84b01479aaef96a7c64e