Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 08:43
Behavioral task
behavioral1
Sample
a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf
-
Size
41KB
-
MD5
a0127ad9af7a896c31efadb407459833
-
SHA1
2ceb8802f6d8caca21c25d7c3285cec44f996c39
-
SHA256
406831ff0062bf2e944ade76ffb1d2151d3648e4220e0f1c97d432aeeec1f8d0
-
SHA512
309af1c753d836e0190d2e1c3d8ba751c550284d11acdf7a6503497c060b1af0fcba78c7807e7dd76b0e6a4b09ad8407bea6e20535ce3af049a564f5de398f13
-
SSDEEP
768:kgGzpDBp70y0lJQ3n1SYyLq27g6lipSBcydghciYCnkxz5TWb9n:RGF9p7m8pSB5gciYskNKb9n
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2484 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2484 AcroRd32.exe 2484 AcroRd32.exe 2484 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2484
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5461f05d7c219ac7151493b420fbfcf7b
SHA1c313e08799774372898471287d476f27090e5c66
SHA25696d2755145c32d1e7748f1459601b0991dea978ab99ae5fad3d7f295c6455e1b
SHA512856639f283a99546b8b857b7d791aad24d9362146889f7aa11d2df464285c46cf732416484487436d483768c651d33dc941b0295eb8b97760c902b7dfe14dd77