Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
19/06/2024, 17:31
Behavioral task
behavioral1
Sample
bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf
-
Size
95KB
-
MD5
bd86147993145cd5f35d4a9b844e5e94
-
SHA1
a36e394d32bb965cc45307d108da0479ba62e944
-
SHA256
5780eef398356df99453b7b9f559e40fe7c48b34fa1a1ad35503fa45800def32
-
SHA512
41184de9dd215492a81ad33fb18e00c394a52a030fd95592fa84992bce3d4db7a99f2534309cea00621febdeb921cb1666ff3ad8eaf949dffb8b427497f558ba
-
SSDEEP
1536:oGFPH2AX3aOABe+K4oaABUFtvd177ikx8+BJw6ui4Hytu5RDQLUlByWwchc3b0vm:FFPH2zOArKgF17R3QFRUAlByWwc8bB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2576 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2576 AcroRd32.exe 2576 AcroRd32.exe 2576 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2576
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54b4ce74f1708d59dddca5caa12099c38
SHA15608ff0367c51822813d3714e908470767f00bbf
SHA25695570d33bd9cd1f1131e18037e8745e1584694046ca250ec6e6f3fed4289a17a
SHA512f420de53a762b05fcb323d6681e8fd91eb1cfcd2c3f481386441a3214fab514d0facc6ffe8bbed90f98a450f9bf4a91155d650f7a82fc2d69dd9e70be812b0c6