Analysis
- max time kernel
119s - max time network
122s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
15/06/2024, 04:37
Behavioral task
behavioral1
Sample
ace61a263a267e7ec27fb5cbdcca2589_JaffaCakes118.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ace61a263a267e7ec27fb5cbdcca2589_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target ace61a263a267e7ec27fb5cbdcca2589_JaffaCakes118.pdf
- Size 16KB
- Sample240615-e8wndsygpd
- SHA256 17c216e7faf9085c1f15f5d08c6768f8f7708d7032c2267de8db048279cab39f
- MD5 ace61a263a267e7ec27fb5cbdcca2589
- SHA1 29706249024630bc2fa8633186cf00a5dfad950e
- SHA512 d714a7a9492a22b1aae198336cce032f7f1ab4ddd22aae3bc04736682087b52c705cab735d7caa3a59cc4f39fe195ff37fa4e4bd00a31561c81e9cd456356eb7
- SSDEEP 384:Vzkuvb/CQZz1gqEHJxtGkIZOWR+xAMdE70Og70OgmmyAdkWGXbOm8tSmQ2UoC:VzkAzZz1g9HhIZOWR+xAMdE3gHgmmy4u
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1988 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1988 AcroRd32.exe 1988 AcroRd32.exe 1988 AcroRd32.exe 1988 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ace61a263a267e7ec27fb5cbdcca2589_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1988
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 e392ec82d6be84b5a1dfd4e3713bb168e5c6e81c50720c829bfca319f8399cbb
- MD5 500d057ecb8701a503f31311504bf491
- SHA1 0260c1d7052815faab5fade2790b2c02ee2e814b
- SHA512 3a587dcfc7db108593286c129243da7a1b0d6850f38447274b3cfb9fa465ff3605887eba4d3e6b65acb0fd051123c308b29ef6f9a64cfe50c2a516bc48ba7912
- MD5 SHA1 SHA512