Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 09:22
Behavioral task
behavioral1
Sample
b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf
-
Size
49KB
-
MD5
b2c3bcecae9f6c62aceeec2a8dc7552a
-
SHA1
00eea758009eb2d0de98004057dbb3fe0d9d51cb
-
SHA256
8d37108fd746c35955d98f7810a423513fe7276e092195a67798661a9c490c5e
-
SHA512
e8b8f9759dd3ec60eeb0e265b83f0b23f1a0ce2d55ed8391a1256c86283b52ff000f19c388c851d1ecd292018f6a00162efdc91d2bc8ebf579452e2e9e066607
-
SSDEEP
768:oVgGzpDyBVksi8CNh2jjvmWdsjh9BaAZQjbeUCvOrWkFVjJjuso8JSV6i01Lscew:DGFmAKjGd+VjJCJ8JSgiwLsceJ7G
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1688
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD580365825739f7a91dce5e36d218634a9
SHA1755d5535a78d3c9840beb06b0cee49f8d75c7614
SHA25619b52e3ef1744c4dde02076e83c16fce550e88fb9e24649759cf2ee16749fbc8
SHA512f6966082a1c618a3ef8c4190ec9c36f6aad1f524d936a26913eccedc18efbc9f199113cfed0a37c1198273f30b33bb1001b49579d423e53e8a137f0cf2f820b3