Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 09:16
Behavioral task
behavioral1
Sample
a4cedd6ad94f018553b3374e9fada773_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a4cedd6ad94f018553b3374e9fada773_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a4cedd6ad94f018553b3374e9fada773_JaffaCakes118.pdf
-
Size
146KB
-
MD5
a4cedd6ad94f018553b3374e9fada773
-
SHA1
befedd89102c19cd7adcaa4da2a389a8e3734417
-
SHA256
234524d24b17fcbde5dfa6892cf1de33958132de49122d405e4b86ceda106bd3
-
SHA512
367d9e0625a4e84a3301e5ddf9b6b2840851c34f70acb92c89f019e2606d02bfaaa93cf37aa8d6ed6eb6b1c9c6099c9060d6165fed1d252ae992221807111d6f
-
SSDEEP
3072:t/npqLJWiNHPF7uGpIj/IUcIN4Is+i0tXyDS4M:t/nwNXF1ugDUcoXxC24M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2108 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2108 AcroRd32.exe 2108 AcroRd32.exe 2108 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a4cedd6ad94f018553b3374e9fada773_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5cd781b7522dce593d76f6d8005dd74a0
SHA190ff29d3cc08e294307437a803b9884612ba813e
SHA25602806302556a68f3f43669d809710ed81b913753f0f13eee4fcb29148b302419
SHA512850ee328e943c6c8e14a9b120be0f8deef893b8a3afaa6eeb435fc66540a4c8271f5a6aa3912b6ab73b53de74ef2a9238f94482cf75fccb178514f1291e6cd7c