Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 23:41
Behavioral task
behavioral1
Sample
b5cadf91c731988320258efde822d466_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5cadf91c731988320258efde822d466_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
b5cadf91c731988320258efde822d466_JaffaCakes118.pdf
-
Size
41KB
-
MD5
b5cadf91c731988320258efde822d466
-
SHA1
2f256335009b9ae4e02e68ae5e8dd2aa94b727a7
-
SHA256
30954c0e85f667eaf0ffe76672fcf8d3434a3b7baa4f7c27024fc4dba1fb907d
-
SHA512
122b4130e63e5e916fec23e31cd3f3170811343345392d9caa106ce814edaef46acdfc80af98101630e449e0391849ca9a46eb2089cac58d4310cd3b0de09897
-
SSDEEP
768:RgGzpDoCGT+hIDTG4nImVUviZLBPxjmU+al4KuMzd4J1zAbdd3DgjpcRvQN:iGF8C8LfjmQSKuUgQdd3DgjpcRvQN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1812 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1812 AcroRd32.exe 1812 AcroRd32.exe 1812 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5cadf91c731988320258efde822d466_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1812
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eb8b85576ff2acce2e1e4746dc78e781
SHA1e84f9e4abf70d2f0f51ed59ae41a8c38c2f968ce
SHA256c0a0b74c415111cd50dd707d836271b4a3b613b56523f2f6b11d98a317bf0bcc
SHA512ebb293ec4d572e1bda96b632852c1a2835de4d2e070acb38fa389209008476d904dd7a59081071fee26cffa433e8ac760683e41ee249d60b08c0b53f71e9dfa8