Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 14:44
Behavioral task
behavioral1
Sample
aeed81ebe4ee4c08e884fbdf668e8bb0_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aeed81ebe4ee4c08e884fbdf668e8bb0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
aeed81ebe4ee4c08e884fbdf668e8bb0_JaffaCakes118.pdf
-
Size
34KB
-
MD5
aeed81ebe4ee4c08e884fbdf668e8bb0
-
SHA1
2cfb33f4fe64ba99228b5f4586d9279b39310219
-
SHA256
e681811cdd6400f21f52a3275e48ddba7eb3493a37fbb3e38989b1ba267bb63f
-
SHA512
4239ae35ebccad2d7cef5fe93aab78cbff6ffffd1399b0834b3fbe1b943e6b1d36645cab4d04a55274536bdc163b36659c16056ec6d5175dea9e5156d19b5f1a
-
SSDEEP
768:0gGzpD6pZsbOpKcIVrqU8Ab+092bnuDU4tIXiv8+:BGFmpCK092nuDXwik+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2844 AcroRd32.exe 2844 AcroRd32.exe 2844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aeed81ebe4ee4c08e884fbdf668e8bb0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ad723890bd1c1968885b113f13791125
SHA1e0a97f2d98e7d90bd997fb5f83afd9692abb7de8
SHA256041ac6ec8d2d41c53ada524b9108fcdc8b115b7aca97a233ed0183f08c69aae0
SHA5128d980eaf09854d63bd41854a1e0505e6ce3999660442efc2c44e9821c74d8afb5d259e7b6cc3afb761202173402175731a151f74fc3ded49c53e6aad886375db