Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 09:20
Behavioral task
behavioral1
Sample
a4d2810c5a64fd62fedd74185da78563_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a4d2810c5a64fd62fedd74185da78563_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a4d2810c5a64fd62fedd74185da78563_JaffaCakes118.pdf
-
Size
31KB
-
MD5
a4d2810c5a64fd62fedd74185da78563
-
SHA1
ad5fe67584abd1b4aa88a1b848c9511b2d985f39
-
SHA256
fbb16557bd7fc1659246640df200e03c762e85ed32fc68f6e6a8a6a467d16b6f
-
SHA512
e04a8b7b4431aad2af5afe2d6a54a19ce6364334af8d1cbd4455721f4d78d2ecd5030abcb2d022bb7922d476d97ee1a0539be6cc73a296e5938430f433130de5
-
SSDEEP
768:CXuMZmwgCLWarT3/RRuwUTFlXQPq0ZAUZNZ7IGS:CXFZmGWSTbuwUTFhUq0ZAUZNZ7fS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 308 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 308 AcroRd32.exe 308 AcroRd32.exe 308 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a4d2810c5a64fd62fedd74185da78563_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5ef580a2b98232573dab4232f7c2bdef8
SHA192b392a019b8bd2244de07fad9664dc8ec7cb901
SHA256846a8190b433075fa360227db626991da7e11dbc625af4ff140f5311aacbad7a
SHA512d4152fd76912beb336fa2348392329e79ded132c348975cea572ec4deed81bf004c9dc9aee43c957de6b9cc40541e4fd962e1a0658c59d165770d90528161d02