Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 09:48
Behavioral task
behavioral1
Sample
91550f454c0200be28b2f156359469d0_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
91550f454c0200be28b2f156359469d0_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 91550f454c0200be28b2f156359469d0_JaffaCakes118.pdf
- Size 41KB
- Sample240603-ls1ezaae4x
- SHA256 d7b5f15b481d9303d5d1fc0e8af135d4a4ef2da11fcfa77587c1f8754b6ac65e
- MD5 91550f454c0200be28b2f156359469d0
- SHA1 ff653496459b4bf7e4c6954a671b02e1655456fc
- SHA512 0c945cc45d5e9d6c601f9950f2a78ca3bdf9da833fb1e813e174b919a79730e1335177be3cf02cba0c6282dbfcf369224ec861f7f3be7623d2e1556b69e5b84c
- SSDEEP 768:+gGzpD3pYIhZU43cX87DExPO/VG4cQ/Xv3xUaEXLN31L5Q6Ue79A+:7GFjpYeHr/f3iaEtZ5V79A+
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91550f454c0200be28b2f156359469d0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 429214847cdaad366691bd026f0a3e966cd78bd3a97a2fe8b1d169119cba8f37
- MD5 fea90b21ff86633ca18977c1354bc313
- SHA1 07253238213be4a3b85146507ff8c21825649438
- SHA512 d914907d70203050b10e92a27a3cf1f401ae73a16e472853f60ccdddfa7eeff11681c82c7ddd7668d71f2de1ceff752da65fc5545b526d8ba6cd4a67c10c8ce6
- MD5 SHA1 SHA512