Analysis
- max time kernel
119s - max time network
120s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
15/06/2024, 04:03
Behavioral task
behavioral1
Sample
acd3ada7e18a1d471c9d2ed00f2f7b85_JaffaCakes118.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
acd3ada7e18a1d471c9d2ed00f2f7b85_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target acd3ada7e18a1d471c9d2ed00f2f7b85_JaffaCakes118.pdf
- Size 48KB
- Sample240615-empb7asdkj
- SHA256 86eebe67819fe8697756f406bcd9c114229934b5e19ad31538fb013ba8021909
- MD5 acd3ada7e18a1d471c9d2ed00f2f7b85
- SHA1 2b682a8b7cfffb504784c77fb81fdad987275531
- SHA512 31b1ca24820feba8ba24afaf861b0f1c54a706aca2de3ed79feb714092b9fed8c12b359a7663b6989eca41990af6a81d87eb6219a3b8106567173f737bd5010d
- SSDEEP 1536:RmfmgfMXKrVemn261xsbV7i11EPBVDGimfmu0DQqaOF122JBbs19/4L4ZMOLE0lj:RmfmgfMXKpIee5uLezyR5BBOQSFoBqkX
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1712 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1712 AcroRd32.exe 1712 AcroRd32.exe 1712 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acd3ada7e18a1d471c9d2ed00f2f7b85_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 ce7bc4c0775f4a59b25b0d1a1dbf5ed971054401961a3da54ffc5bea053163a0
- MD5 ea5f7726e510e0218bb6b55156c06e0f
- SHA1 0174677bbedaa21d282b3e8638bbfaa454c4a8ba
- SHA512 ecd556c59982668ac12faf031370d100d224876f00679336d33cc2a501118bc271c283b7002e941b4360faad8288ee33630023c556c1bd61d1df1ca56715f2f4
- MD5 SHA1 SHA512