Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
14/06/2024, 09:05
Behavioral task
behavioral1
Sample
a8dfa5edd413dfaedd711314a964bce6_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a8dfa5edd413dfaedd711314a964bce6_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
6 signatures
150 seconds
General
- Target a8dfa5edd413dfaedd711314a964bce6_JaffaCakes118.pdf
- Size 39KB
- Sample240614-k1794stdqf
- SHA256 2a1df7577d979fdb6d8d0b4e85e0b07cfe4c46bbbeca3ee08a92d0a507f8a0a9
- MD5 a8dfa5edd413dfaedd711314a964bce6
- SHA1 1b01bd17691cc9ac9daa7bff57dcc191c8aacc78
- SHA512 3501bf65e20e04c490779747edd5662cd771043f614915bd1f322e3265b5a2c0e1aec14ed2a9158f0ea4bdd920603dac32975561fc6b3c21cd3783e2a564eb72
- SSDEEP 768:BgGzpDae8zz2Pr3SRFvysLoht3p0lXsYNE9eyh2aMWs1XyG7tTyNRPrfGxy:yGFWeffLMWs1x7hyNVrfGxy
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2436 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8dfa5edd413dfaedd711314a964bce6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 831f487d3212a4e20a20011bbcc1a6586a424604aa731c3cc3e7109278a36793
- MD5 030531af8c0af364671cd85dc9e3147f
- SHA1 702f9d4f54581f38ee264987c23fc15b6b866be2
- SHA512 b21ad91ace3f37f3318644d3899cbc469c6bc10667eb4dbf363d7bf04b09427a8f4da6558c969ea290d1b4455603c45ba5016cf097ed74051c00e457fcdd10e6
- MD5 SHA1 SHA512