Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 16:32
Behavioral task
behavioral1
Sample
9274f364301be3e74955a87006340407_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9274f364301be3e74955a87006340407_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9274f364301be3e74955a87006340407_JaffaCakes118.pdf
-
Size
35KB
-
MD5
9274f364301be3e74955a87006340407
-
SHA1
affa7640a04e233f73ea328ab3f35d7f46c340ba
-
SHA256
c00ea9d0dc751870e2f80db124bdc543b8174b9dd8b62859ab9d812cc88f5f7f
-
SHA512
4e42b20587cc08e1fa75d1d92c6732ceb65f390889bbaf49587f887883a47e7f77e69ed610b3200a4350307c65fe062a023d091de1c39c3f22dde10a3d41cec4
-
SSDEEP
768:gLjX06mhDiuxG5UZf7hQWky2O1uaVFVOiL1rPVVAGpmNuUDQ73E5rXuMZmwgCLW/:GjtuDuGZf7hQG2O1usFVOiL1rPVVAGpN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2468 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2468 AcroRd32.exe 2468 AcroRd32.exe 2468 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9274f364301be3e74955a87006340407_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2468
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53cd178caf0bbdd5761b34d1f6dd4f592
SHA15bb86fb06effd61ebdbab379395b4db074304d8b
SHA2563468c5dfd35643b64dd3b555bebaa3fd2a3f73e4c02c645bd89d336d4f9c247e
SHA512debe631ffe2bfeb69f620a16a037b146cc7351be93def21cc5daf1f505fb93a9366b065b248e621602f35f5a5084ac11febb144756e364a456cc38d8b8d56796