Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 21:43
Behavioral task
behavioral1
Sample
9c08152c183884e30f77c27908605b46_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9c08152c183884e30f77c27908605b46_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9c08152c183884e30f77c27908605b46_JaffaCakes118.pdf
-
Size
40KB
-
MD5
9c08152c183884e30f77c27908605b46
-
SHA1
73deeb2bd456e5c094cfabd07f8aac808afefb88
-
SHA256
66fd14b16ec0b8b878785344bad38b8c89e2fce483c7706ecdb0b19447aa892a
-
SHA512
9c4da3c9b8d97946f968111e8aa69f5f36863e88b941e50e07317ab16a3bd0961c5bdb57ea8a96f722277639d685c32921ac9859f50c0c8bd962dafed2d35fef
-
SSDEEP
768:6gGzpDPppeKM+Qcd5k+nWNHhEWEDI2aUp89mc1m1Zz4ggZk9L2:nGFTpQp+Qccg+Uphjsgj9L2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1848 AcroRd32.exe 1848 AcroRd32.exe 1848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9c08152c183884e30f77c27908605b46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1848
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dcb7af9612ec662a3799dcb865f596e7
SHA178e9f2f3d788bab417616585618c6c6ad30b9d3d
SHA25644708f0b0d78b9546ecc86a1257c74464b4824f1cc7936ccdf5dc946004376f7
SHA512c739206e49d9907f93142911117607e26cac42707605a38b107a4a356a8126ba597fa48a93062e72193519375c224f845921af08618f22ddc6046e37420527b4