Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:10
Behavioral task
behavioral1
Sample
a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf
-
Size
78KB
-
MD5
a70a66b201e16e699e619a868af7880b
-
SHA1
0c1ece418c1bfb0f3c4614b627fddfadf9773bfd
-
SHA256
b9f3f049479e25885dc494f63dc5516d895468c66253ba2fe5da044d073a2898
-
SHA512
e7974fab8741e162fc18cdd42cc9ec8137b3530573cd079216392fff40f0f060925f3619645f43ec536fb1f8ab759e95b74be0b678b0b3a6a3650d4ce48d2e7f
-
SSDEEP
1536:6XFZmGWSBHxxGrWQRFauQtXSir9RtXD4pjgZ6PGa/0nueHMIAB:wyssWIYu8XSBpjjek0ueHa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2020 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5e2fa139d713c3d5ee94d36761187b66e
SHA1214d26118cc4fbb52195b371dc1d87c736784e5d
SHA2569278a0065c92eedcbab28dc54524d1a6f827c3de9bfec2535765cc0aedaaa355
SHA512512639de59d010a5c2130ea7214e7717d0c3f43a5b83d9607db82be49350fd656060919a62c257fe44d13a6a7c26436aea291be5bb237c95a448657ffd3bfc41