Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 22:25
Behavioral task
behavioral1
Sample
a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf
-
Size
42KB
-
MD5
a6dee16b44ad062a1b0eec3ce9e6ef46
-
SHA1
e0d3eecee5fc743dcd24e96a4a0c0dba644f3171
-
SHA256
e7e9f4c5b350264b116c59dfe0ac471f7f91d104752ad2c934470cb5398e640c
-
SHA512
ff078eb3126133851d4d8f5a991ff4002ea0eeabb080565f32608d58e25ab1b642da82a93e464772a1a5efbfaac1c5f3c32612606ad388820ca937bcdbd262b5
-
SSDEEP
768:sgGzpDgOWela7qRKiUmVj1vjLUHEPWNQn5gRYcZ8HQAj:pGFke3+EONSEYcZqQAj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5049d96137ca547b7b71325f1039d68ee
SHA15a52b86b90a8ced9aa66d2de81e5335328f9cfe8
SHA2563e0400bdf9aaa3cbd15d0b4c8df0b62a0437afd23ba7588ecfc9841256ebcf37
SHA5126f8744085c74bcb3e47e98d59a141e0754770c9fa6e682491b3a87370f8d2bb6b49d87b48496bf6c423075fdf3c755c072c9fc1bd3af810a3f03704dbdbfb85e