Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 09:11
Behavioral task
behavioral1
Sample
a4ca9251370fc869d1f1a30315b81a22_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a4ca9251370fc869d1f1a30315b81a22_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a4ca9251370fc869d1f1a30315b81a22_JaffaCakes118.pdf
-
Size
53KB
-
MD5
a4ca9251370fc869d1f1a30315b81a22
-
SHA1
19a9ded4c6cfa42f79399fbc933a84f076476254
-
SHA256
a6cbdb6ae13dad5980e327a77f8624f71169a085499adffd3c6ce9d4b27eab21
-
SHA512
c930baacd6cd1d93f9132e2403577c3da2f7533b88026e14c8f124a29a7bc1a4242d7beda5d75c5e6a27d733e773774cd22b174d0f3b9e9fb3f9f2bfdb96c1dc
-
SSDEEP
1536:SXFZmGWSw58F3fCoaEFIpFwcxYBoIYHdLYn8AmR+OXiyVH10hn:IysuApoJkmRnVVW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2424 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2424 AcroRd32.exe 2424 AcroRd32.exe 2424 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a4ca9251370fc869d1f1a30315b81a22_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD523f0a7f5e9b8d302c1b24af7a8621177
SHA1de40fc7e602b48853f5c6fa70bb64d5fd95bbf5b
SHA256cb46433dc56c7963f948b68577898778316e438fbe6f7439a5c4c02f974f9206
SHA5120488f46aa96e16789604dbb15432adf78a71e014325c09c99456260d1d2cf90b45825de465c787531bce17fe54a6e625c27449d49df8aa780aacf229feafe6f9