Analysis
- max time kernel
119s - max time network
120s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 09:28
Behavioral task
behavioral1
Sample
9148bfb34eda8d0a1c3a14b976510b39_JaffaCakes118.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9148bfb34eda8d0a1c3a14b976510b39_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 9148bfb34eda8d0a1c3a14b976510b39_JaffaCakes118.pdf
- Size 51KB
- Sample240603-lfmncabc97
- SHA256 f23dd2f0f8a8f1c491e2fae0f19b42bc22b032ed79197fa0b7672ece62b25a74
- MD5 9148bfb34eda8d0a1c3a14b976510b39
- SHA1 5346a4208323fd3de0130778fe8bca58e6a463d5
- SHA512 3a7c3eed2751ded797dc53fb10143102f31fdc9e663a55aa3a07064b397cf497bdb0bdd2732a9aa934c3ec707b57c4c1c888fc25eb31c125c2cc5392d9987e37
- SSDEEP 1536:NGFFcpQvHQk0xEN1z3JRs5hbCljJZfmmhm:QFFcMHQ1xMVJRs5hml9Z+N
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2468 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2468 AcroRd32.exe 2468 AcroRd32.exe 2468 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9148bfb34eda8d0a1c3a14b976510b39_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2468
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 1946dec5c1c440180b9ac99805bf1bedf74576fcb000bb0709a13e362c170109
- MD5 660e1417738a4f36fe3cabdfc4c4ae88
- SHA1 b3b8f9b941b7642fd29f6f5e359245fc5614728e
- SHA512 d6e7d42bf7014f51d1e43d60407d0eb13193fd02c02c8c944a96516ba14090a08527162a60db3d7f78e9a9346369fbce20bac8855a197ae513deb5e8d55ec0e6
- MD5 SHA1 SHA512