Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 12:40
Behavioral task
behavioral1
Sample
a595b420f09589e710ecf9cad026fffa_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a595b420f09589e710ecf9cad026fffa_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a595b420f09589e710ecf9cad026fffa_JaffaCakes118.pdf
-
Size
69KB
-
MD5
a595b420f09589e710ecf9cad026fffa
-
SHA1
8dc28be0593b043bf495bd7f7b419919914923a4
-
SHA256
18bf77e399b622288991b7d916f4bef0252b23c472101964da28731b7b17926d
-
SHA512
d5027d5b64148dcee982738f10963e9b906a786c018e5257df370aae8438ab4d4ecc56bedb736049ecba16fc7aa579fa7627b0701b08062cfeb9b1168fbb5aaa
-
SSDEEP
1536:7GF1p3iocFgymZNHHsDrAu3j4XmSE/abFuacx7rvj1TlobL418G2:aF1pShFanEgmS8GFuBxzfu416
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2436 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a595b420f09589e710ecf9cad026fffa_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5b9d47d79e0d6cb6886ee148949eb0624
SHA164579e1ed5a996149ac9f35b6d75c39df8a8b8e2
SHA256ee1b4604c9a94cd4ad0e5e9d977bbb555924cff1654bfc626d2847128c644af2
SHA512b8926f3a9f12cc02e77bbfeaf7be59cd97627d979da677dc22dfce99f79f690aa30302ebe6574b1f19354ab5ffb9b0f987ac2741d5651149f58a7b7c71f6825e