Analysis
- max time kernel
122s - max time network
122s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
22/06/2024, 04:47
Behavioral task
behavioral1
Sample
0154f7b7bdee69d611dfcdd137509424_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0154f7b7bdee69d611dfcdd137509424_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 0154f7b7bdee69d611dfcdd137509424_JaffaCakes118.pdf
- Size 8KB
- Sample240622-fe17fssfmp
- SHA256 d057ab3c124478c75434b273d2efa81b0cc458860a5e817abf56cfb3066a334c
- MD5 0154f7b7bdee69d611dfcdd137509424
- SHA1 4235939d2598a0956e8202d6d644ffa8e12f6930
- SHA512 5a23556ae58dac8c44bbb1fd21d15c468ec5bb55a3d38ae185632cd806f5d884baab9d680f0fad60eee07999792062c39c7f5e6e4f9fe4f624a466822f4eaf3c
- SSDEEP 192:A0G2myGLAFhbOn7igY7TKZ/Z52NvxYUY6+EfYW4GlZ7bkSR:AHyGIbOGdg2NpYUY6+EQW4c79R
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0154f7b7bdee69d611dfcdd137509424_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 22452db5ab417b54b37ea444ce0984fdc7bb3613395feaf31fa04d3c32cc9ee8
- MD5 6ac4d513673564889352f1691a5ca291
- SHA1 6b55b538245df08b3f298f48d48991c42fa42921
- SHA512 a95ceab50780214835e2d19f7d5c440cc393c765689f65a15951df2496057c29c1b90b20c697a0303a7807bedb4ef4d81e71945bbbc7423dd8c43682b9a72c8d
- MD5 SHA1 SHA512