Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 12:51
Behavioral task
behavioral1
Sample
a59fb72666c5cff011199e33f9393253_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a59fb72666c5cff011199e33f9393253_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a59fb72666c5cff011199e33f9393253_JaffaCakes118.pdf
-
Size
43KB
-
MD5
a59fb72666c5cff011199e33f9393253
-
SHA1
655a04afe451ab52d61a1470f0087c36293fbbd2
-
SHA256
d7adce3988442f625fc93b605fcf2cf1dbad93ccb694d1bb4c020e8033d6267c
-
SHA512
e1c7dc9e679c6088273db52623134564fa61c8e50a71b286e6d932b70d002e82854eb84299801301b1cb55d01322a4854e2817484d0ed5494caf1a1fc6abee08
-
SSDEEP
768:bgGzpDopQHWX81UcZZOXCtqxmXM9sPJOdAH//fyZR49pxpiHe+dL:kGFspQL+sROAnKZR4F8e+dL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1924 AcroRd32.exe 1924 AcroRd32.exe 1924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a59fb72666c5cff011199e33f9393253_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD596f14c600c438286361b61f96b12425d
SHA14beb91da5920f7a95fd3190639e69d2dfc562571
SHA2566f3bd92a27cdb445ee6cf6d3d4bc87492bedf6ea33986d79071a68c2d5a2a007
SHA5129bea53e6a7f77d1c133f6c87a051e2523e07b86714d8930d15db6acd6f4b51b85968cf819dd8a0cd51e52f0dd5ee3bce100b85d8986247c5c2a9b3491c1d32a8