Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 07:55
Behavioral task
behavioral1
Sample
910664aa5ec556d1bcacdf0006acd607_JaffaCakes118.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
910664aa5ec556d1bcacdf0006acd607_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 910664aa5ec556d1bcacdf0006acd607_JaffaCakes118.pdf
- Size 38KB
- Sample240603-jsd6mage8y
- SHA256 2e92d77f2b2561962aaa1021d415226a9e31cb9ef1b9ede2f8b80ed731ab8f0e
- MD5 910664aa5ec556d1bcacdf0006acd607
- SHA1 db90100d2bb22b826dcf4cd7a8a4d7248cc44f76
- SHA512 4b71687c49761f6fc8d33038a6f885569a3dd12e662d4ce99d24180a1cb0798dba4fe4a0ca389edad8417db19b4f4f00df0eb941f63b13ffaf4aad7d9d5220f7
- SSDEEP 768:ygGzpD4pD28lEpyiuDydzkIwK6IiKBiutCsdM+hdpuguOXEp:vGF0pGkIwpIiK/tLdM+hdAguOXEp
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\910664aa5ec556d1bcacdf0006acd607_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 868170c4389a944a73e774d248386b750bdd50511831a64c2e3639b6a891cbc2
- MD5 e32f9f0dfbcdca8069a09855ca019c95
- SHA1 60df62f939042055955c4a1e19100ed52aab986c
- SHA512 d4df920615a192e713f77662611d144d6315631ec4d2774629c835bc2ffffe65fd69973af1c92c1ca36fe5c87554484595ea718bfb4ab72b025e7f604701d0f2
- MD5 SHA1 SHA512