Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 02:14
Behavioral task
behavioral1
Sample
ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf
-
Size
125KB
-
MD5
ac8e90770868aabcd8737ed318a0f399
-
SHA1
3d6315260650029dd271101a1ced56a9655dd6f0
-
SHA256
b95ee8c1b8e55ff199c695569716a70d4c511171e0875e13ebc2520a1cb9e78a
-
SHA512
eee10215695764ad1d04836b97cc5227f391ca59d78418adb468295a6b20225b72fd32c164f12281d149748769a974b4c02afd78adbae7f3a2697bc8d9cc53a5
-
SSDEEP
3072:GaOdQuFofnaN9PHx9Iq6KMAf1PyLalA+/tyOhjI2Nysqq:mquFofna7x6JX5AQONIpq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2868 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2868 AcroRd32.exe 2868 AcroRd32.exe 2868 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2868
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e4106489fb6bdb1c0496bac018615c7c
SHA1f58b80fa4c70143e396ae7453c27cd7305191d22
SHA25681c16024044cf7dfe717f1271d11dc129631a6bdf58aae5a67e0d10f25247122
SHA51227d689e2b898d656e64c71150e157254c0bb40790109cd9b8dd6890979ca6f886db28b680740810e855a2eab2c7aebfc83fbc22ea0be9db58025f8a4a7217f1f