Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 01:38
Behavioral task
behavioral1
Sample
ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf
-
Size
364KB
-
MD5
ac6fdeabbe3d32523b13e7286662c772
-
SHA1
6168b12f4a9621a33a3f3fd042bc6eb54467576b
-
SHA256
173ed3015f0e28faa86280c2960e98f5f8b4dd5ebe7a8625964221696e716ddc
-
SHA512
f82fb4844fdde18608294870aa0eb3ad170f226668d2433ee67f9e5b12c87e1928484c5266c93d44505b4f0bd69f8cc3b9c6e48a02826f9dae959fd5bb709dd1
-
SSDEEP
6144:qSKScvKUBxUxj2BPw5jLkryVS4L7KpVE11zUIvAQJrevrguVF4/y:qS3jUBIj2e5srb4V1eerRKp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2152 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2152 AcroRd32.exe 2152 AcroRd32.exe 2152 AcroRd32.exe 2152 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2152
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5557b4f101e1e40a3f512c29d52f176a9
SHA1a3ad6d14cc53836283a1589b3b3b16d6beeb13e9
SHA256cda2c76ae613184e6b6eba3206b190f9854c6b50f35ab061ce8ce7a3e720bb98
SHA512951b2df5b2bb64194a2d9bdf9328ba26033f3e405c225533f8536c8e6fc89f4c9bab0ba53f7e4abda8c75dd119a9ef064b489402969854475ab182adc6580f7c