Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 17:54
Behavioral task
behavioral1
Sample
95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf
-
Size
46KB
-
MD5
95bfa74933fd002741adb56fa783a785
-
SHA1
19675f4bc312038117b1ee04097d0a723bdc9372
-
SHA256
a28b0f78b34f8650625fbb79f0b43987925510e060c851d2e738046ac281c680
-
SHA512
af789eeb2134b0025f3a123c161dbedcce96b731ca99cfc14ec8cc158a16e24ad06033c389aab69d0647440152aa524301cff052773abcb3dbee8d8127fecda6
-
SSDEEP
768:IgGzpD1p5nXfsO5oZ7a/+Vwr0ZOf6LRzzynbTp7lUgJlVvwI3E0/0inZPzBa6S:FGFppBeZw6LRfs7FJbvd3cin9zo6S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2872 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2872 AcroRd32.exe 2872 AcroRd32.exe 2872 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2872
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5083fc0bde9827dd67c221395b602011b
SHA12a0e58ea6abdfd68347b6d222da54b7fc96c8506
SHA2569c5abbfbb6af738eb82e449a9b0fe1a4ded83fd07c1e70dc067f8bb4ef37cdfe
SHA512cace63d776e30cf705cd4fcc48c6c9b4add807a5cdf8f54677df022dfd99999f6126c8db82d66fd80f2be57ae1b454b14d9394a67b0d9c3b9c33f5f6623c6883