Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:06
Behavioral task
behavioral1
Sample
a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf
-
Size
43KB
-
MD5
a706988c0e947a02dc0dc23aedda8372
-
SHA1
ca33e4bfa0cfd9263b62f591d7393edd7cd76fc0
-
SHA256
01e11d5ab87c876064221e797ced1e35884269ea2166947d0885518c6cb95362
-
SHA512
399dd201b4b37bc6ba31b42a6287e0676a667f0d3d7672451a2d7883247c099949e811c41581f42deab8d942c09c7702c9c24f8aeb1ce602ba13fd482e312cf8
-
SSDEEP
768:PgGzpDVpQ0Ncb3189YBlvIN1ovbdzPsLMuNDu8Dn1AJOkZnsnm5Dc:4GFppA89QlQHovgDu8JAJAm5Dc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2068 AcroRd32.exe 2068 AcroRd32.exe 2068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5c8fc0f0b3b3a2ada219514995b010f8d
SHA1f8a6a6e61d26f1c4f4fe9b2e5f4ca1a03a7f6b2f
SHA256f63b5300699cc66280869c6e9365b8f4b85b2216eee7d0d8188d6860392aa519
SHA512bd37d545d6ce188491ed271f3b1f06673b0f36e51be54f8f0de1fd8bde773ea58a648d0ec662327c3be6e509b73490e1f62c56316fd94a5f7c5260b96d3c0791