Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
11/06/2024, 22:34
Behavioral task
behavioral1
Sample
9fc3a7c08aebffae9ade63e472d24a40_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9fc3a7c08aebffae9ade63e472d24a40_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 9fc3a7c08aebffae9ade63e472d24a40_JaffaCakes118.pdf
- Size 36KB
- Sample240611-2he92svbnd
- SHA256 bceb31aaff7faf3bbcb791a35b2d1ca1bd3d406f4fc6cf3a076229844dc32b58
- MD5 9fc3a7c08aebffae9ade63e472d24a40
- SHA1 13c908c15453246c8d4e498c9ce4b065d6cf4a36
- SHA512 070fed42cb4fd8969e5f73ddad22ccd8b5146f006e007905ceb1f98ebb41f4bfb744c8c37ecf04bd5afc4e4e3d986aac6d30dd1d76f39dc044c17d57f030a1b3
- SSDEEP 768:uXuMZmwgCLWarS1E5Hpx37F/ZNmyS2js64GvmeJvgSp:uXFZmGWSVj37F/ZQySK4GuWgSp
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1484 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1484 AcroRd32.exe 1484 AcroRd32.exe 1484 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9fc3a7c08aebffae9ade63e472d24a40_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1484
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 42f6f95fe6d41ef4b679820d86426521914ade63ba62522f5acc25e79472de9d
- MD5 7a0ef27e77158760864e89a289656d90
- SHA1 b9c622f3b75513970bba0692c970d8300faef294
- SHA512 551c25f094c778740201e27a8db10c585e9d654c6e1ad350e9195f01eca98e63d1756b3f2dc7b9fd53b9f6a63e819a0ca3221cbef54babf0a87b6036a505c112
- MD5 SHA1 SHA512