Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 07:56
Behavioral task
behavioral1
Sample
a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf
-
Size
27KB
-
MD5
a89f5b7ffb047eb9ced6be558a193329
-
SHA1
d344d4aa3c5f3b6fb33a6894b4a795363d2b5aa3
-
SHA256
07deb5225c2caa50c084c2b7ba8593e74d21f54ff3f58f58fe6c83b1cc871663
-
SHA512
8c35fcf432bb8004a880112f5b2f343055c0067209db590d15e9823a118081cf15d1fd7189db8ee8fb0efbb9d9f995e8cfe37e5976aa55467ab25c36c4ee6aff
-
SSDEEP
384:J/QON8MUG6Qgw0JZCTzz02YFnarX6l/6c11zW2cLQVlE62D2vSM8Iu5DwyCUS2ZS:JXuMZmwgCLWargPG2062DASDzlXLeTt5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1728 AcroRd32.exe 1728 AcroRd32.exe 1728 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5998bd657218acb2bcdc5c0c1e83a3707
SHA1f9919a4374dd8c53de1bf1c30a39d8226fcd6d6d
SHA2564263d71aafb72cfcf29032eaf671b18112848b0448b0ddfec1d5eabb47f76a04
SHA512381b7eb364c37516d244deaf6e7f7522c2dcd3eafbfcf5f1417c1abace836e7447971b682f10e18ce5f070b414054d4653d838ad81d516764bdbac9c6ea80a73