Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:06
Behavioral task
behavioral1
Sample
a706a26d003522e88eee56d9704745fd_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a706a26d003522e88eee56d9704745fd_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a706a26d003522e88eee56d9704745fd_JaffaCakes118.pdf
-
Size
50KB
-
MD5
a706a26d003522e88eee56d9704745fd
-
SHA1
24f5079277eefc97b0964bb148097931da7bf58e
-
SHA256
a3bbef7a931e5bccc443c2094dc84bf206e373362ecf3c6c3384ada78bf5f642
-
SHA512
3986ee6d4b984241399d8449983b2e0c93a583f52ad326a25ec0b58d983267fa5703fd04bf10d676a663e96e74c50e569d646b76890362b63b488b0062fbd187
-
SSDEEP
1536:iGFeefkgD9PAIyC6ca27YVTWlYrFlqDW/:bFee1DQa7YVTWlYrl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a706a26d003522e88eee56d9704745fd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5316228e2b5c7c7ee6e445ba5d80a23dd
SHA1982dd419b350dc97fbce82b60f858ce9716ba21f
SHA256b93476e7d57ac44faee27bf93563d916c70183c7aea003a9fb39fed4748afbe1
SHA512e3534141d4e2a70a3d81f4cba73d53524a6179f0fd9bfae9faa9a6786b04457d12a0e6afe15ee53f29229aacd611186056d979fe756415f006aca7ba50d0c965