Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
15/06/2024, 04:51
Behavioral task
behavioral1
Sample
acf0ce03893c63cf2f1dfd4638ebe0f8_JaffaCakes118.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
acf0ce03893c63cf2f1dfd4638ebe0f8_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target acf0ce03893c63cf2f1dfd4638ebe0f8_JaffaCakes118.pdf
- Size 15KB
- Sample240615-fg2k1azamd
- SHA256 28931300c5414da70de3663436ab8971f847066ea92ef659fcae8152e23c8005
- MD5 acf0ce03893c63cf2f1dfd4638ebe0f8
- SHA1 0108c78bddb3156603a5a75fc375425c7a634c66
- SHA512 73d0fb735d219db6446493c9e14c935ca376d0536a1108ceb97008bf6b9d3932a5c03f9ca9c63a14934e2cc685c72121d1bcb7ef98d19550fe3742c0a13c1970
- SSDEEP 384:Vz3gcXX9l7z1iNaPTwzlSudJvs1pCv5VCRkdYH4Cg0FdQIt4PtYeDr0QvnN:Vz3gmXD7z1kUTwhhdJvs1ITdYH4C3Fdo
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1936 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1936 AcroRd32.exe 1936 AcroRd32.exe 1936 AcroRd32.exe 1936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acf0ce03893c63cf2f1dfd4638ebe0f8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 d4bb0e2196d9d47116d7bf0935dc06a44266b59f9ebd6c13df6a32aae1df3fc7
- MD5 633307c25a937bf278a329b8a359be33
- SHA1 47f027c846a9a8867142ba57cb74dfd9837de507
- SHA512 06abb772f210fba0a28afd9019b785deb24cf1deef741a37631b1f6e73895b4391a3d7d5e74eadd3592423b1e5f0b61ebed905c967bee4bb9cc3d401d2e409b1
- MD5 SHA1 SHA512