Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 22:27
Behavioral task
behavioral1
Sample
a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf
-
Size
36KB
-
MD5
a6e165cb89f7b0d4a235db5ec1258e8e
-
SHA1
53265b2aae163397d838eb8fc252d62628f386b0
-
SHA256
f90c711df41ff0dd4dd247d115c5136e9467ea3763b92f78f9a1569ba5126d33
-
SHA512
521cb16066062c5f7066bd5bf1b651284de43a20b20c9a4cdf348bf14d134129c0f23ade926ca870d07a0152434dde1e4f2e802e3d9eef178eee7816585d5a40
-
SSDEEP
768:3XuMZmwgCLWaraE5Hpueuj27rrNCo8JmDdZuc8y5okwkOkoq:3XFZmGWS78euj279CtZs5okwpkoq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 3056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 3056 AcroRd32.exe 3056 AcroRd32.exe 3056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5c144d38ef3742b6f0c5e840858e80c89
SHA1ddbe05afc73ee2e1cbf6ba663967b204a11f130f
SHA2568b48a5814ba7fbac468b02c47472acf6edafbabd2053a7c016f650aa27549d8e
SHA51207b180a397639b5c0862c1def8d3571e26deee4130e2d8fec00a424ba116cc57e3c208441dcd3f8b37fa22d8b06d58cd2e020de78b9d346ae1de98a32d176071