Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 22:26
Behavioral task
behavioral1
Sample
a6dffa21b93373384726dd944ff0370a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a6dffa21b93373384726dd944ff0370a_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a6dffa21b93373384726dd944ff0370a_JaffaCakes118.pdf
-
Size
60KB
-
MD5
a6dffa21b93373384726dd944ff0370a
-
SHA1
9a3a5f3d8aa20b17572dcc94c6caeea992f255ee
-
SHA256
c59ff52990fee20b5b8d098168e8143e4057e392b96aa72c20e137c22e157430
-
SHA512
b124ca47126dbb3889d6845941b2da2ab97596da6667eaf1f3d85b3fe1a38c9d563d20eb9e9efed7bf9a86b11e177b654e331caebcea7f03ea95dca831abc4b8
-
SSDEEP
1536:EJGzPXR3TyhCctiN215H3iKiKtkZiwRMtAZvnsE:KIh3Tynt3p3iKignuZvz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6dffa21b93373384726dd944ff0370a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5241b5e2f110c60bb7829a1655d50ce79
SHA14c712fef297f790db07e7a0828883d17ad172418
SHA256c4ee0b5f64aca8d9d5a196e97632bc58a60d3239c4d0ddab7de20812497ddf5f
SHA512eb577b6869462594651eaf5ce07625d4de79411018ff4fd2a4e56d3a00a4d12bb37601d4cc1a704f0ecaabc5a52b6f8bce1c9c3825d2aabc0fbc9b4389d589f9