Analysis
- max time kernel
120s - max time network
121s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
14/06/2024, 03:31
Behavioral task
behavioral1
Sample
a7dbf2eaec2ca2de1c384745aa3a178d_JaffaCakes118.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7dbf2eaec2ca2de1c384745aa3a178d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target a7dbf2eaec2ca2de1c384745aa3a178d_JaffaCakes118.pdf
- Size 45KB
- Sample240614-d24jzstdpb
- SHA256 51042fcee671feeb439d10af1508e9e5df336d92f7468cfe8d1e8b74b4a14935
- MD5 a7dbf2eaec2ca2de1c384745aa3a178d
- SHA1 767cbff94b782e09b77c82e1869a69b968f1d1c4
- SHA512 8b4e7c766b01247d5c8dc12dbedb11f24fc6dd5fa3657ee646829672109d72c06bbe531257758caec607fa233872a2ec367afc9dd9922cf444b93129c4a5481f
- SSDEEP 768:CgGzpD/4MB3lrv69azqMud+Kz55vUtVkLKSXg2jKUF7yfpC2qIWEOmsQQ593:fGFrACVbSa3fE2qIZY3593
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a7dbf2eaec2ca2de1c384745aa3a178d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 3e7cbc24517e0ce430b4ed40fd479c01abdbeeae0d6e63f2f20a4251acf64244
- MD5 69d8b1a6440bb43d6e26e026f1ab2b60
- SHA1 ff7ab51033f43b9e0397d62b069ff361eea079d7
- SHA512 18534f252d0998b45f2baf4f0260b247cc21bf65123ec065a73134888375b8b4858b1df6571bf2d311c782a10544b919ff671210cc31687dc1ee63f1bb42ea49
- MD5 SHA1 SHA512