Analysis
- max time kernel
120s - max time network
121s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 15:02
Behavioral task
behavioral1
Sample
92337f0e3247e053023f34517c279825_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
92337f0e3247e053023f34517c279825_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 92337f0e3247e053023f34517c279825_JaffaCakes118.pdf
- Size 41KB
- Sample240603-sepvmsac8x
- SHA256 193e16e4f6ca09f801d8aafceae9a2ebb07820b5ec9bf572d91462daac6224c1
- MD5 92337f0e3247e053023f34517c279825
- SHA1 018c094e3e54f30a2b5e104794e6bebf75882072
- SHA512 824a972bb25d63e9c96627bfed00feb0d3062dd3a2cb331f05e5adedf70fc459871733fdea3db4215b234c5d4df73f22a996da21b856292df96f6edaff579d30
- SSDEEP 768:n6gGzpDyBVksi8MKRtPDz2QY2RkGxHgiNpDQoJ2qs6jAHBkoeQ4b:nGFm/LNpDzS6WBheQ4b
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1680 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1680 AcroRd32.exe 1680 AcroRd32.exe 1680 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\92337f0e3247e053023f34517c279825_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1680
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 7c32ebed40387e0be447e70b0e16822f6d1b96bb8f573d46f152d46a71678fed
- MD5 2a1231fb2f9fef6745b1a73c6494b0bc
- SHA1 24ff4d3ce6f7d53bc2cd97e4d677597cb65997b1
- SHA512 8776bed347c53eea0408eccdbd2f6d2b990eace7cf3086a7881ee6beca6245b19e5618b7fea74b7de277badac9b8ecb28efe8dea308bdb9fecd9cbe9758fe9a9
- MD5 SHA1 SHA512