Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 18:11
Behavioral task
behavioral1
Sample
95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf
-
Size
48KB
-
MD5
95cd7dcaedada33ed4b9389e2021c216
-
SHA1
58c709ffe09c2cf75dee0ac06c932e68cea7f788
-
SHA256
53f34b6d57ae5af0e94aa756719ac93b431fe4a80d087bd397bdf4c831acb8eb
-
SHA512
38ca3437995af8564e007e5e87a07e77237c0fd74bcba890d0cf62fbf72e7a45a401cb79ae71219224d1163db5d0cb29dbf62fe077872f5f71bd74bdc54737eb
-
SSDEEP
768:MGgGzpDBpLGN6jTXGNhzDWDESTdo4yBUKwg55nvKWfxVWkJteckGWy:iGFFpzved2KPnKW5VW2MRGWy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e0f38a3d7da41411f4de319b8b4a1978
SHA1ccaa5e57a9beaac924cf6d354aa6424e698c37c8
SHA256fce3fed29e7a313d15bc0be8d2a910abd63f9cf37de199f08c43829aef3d653e
SHA512d20d8322a9136e6891522b9f946212efb9909fd8486f22ef2483c8ed0562a6cfc661ee11588cfc347aabd80503756441f1f23f6be08a5a10b09b07d2af92c4e8