Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 13:01
Behavioral task
behavioral1
Sample
08a814695545176c277544374aafafb9_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08a814695545176c277544374aafafb9_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
08a814695545176c277544374aafafb9_JaffaCakes118.pdf
-
Size
15KB
-
MD5
08a814695545176c277544374aafafb9
-
SHA1
000fbadb686b99b8fc1007c773f05b491a6c87da
-
SHA256
72654b36f6a240d953a9ce3e898a4dfa381031ba7f5e2ad379c45284db60f595
-
SHA512
69152807ccde331757743cbc3da43a310d1d482f34c7243f4e2d5da558828018d9b6d29279eecfe9ef7af1ffcd1dc3bebbd8f134485a1745e097ee5ef46110ba
-
SSDEEP
384:CP5uqkP2R6pj1lCvctjpys1/b2pK9gIlqW8KujeERwnmRYJ:Nj100ks1/KugFL/6EN2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08a814695545176c277544374aafafb9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5363761b223e78e94c283701ef6516c8e
SHA1923517df053c5003db5d15b2999d30deae0dca45
SHA2560090f050465d578431842e4c28aebd0d7fbb9f45621abaebc3752d705e72a4cd
SHA512a58b3999020dbab3fc62fe6b6b90e13204ec526a276121c1be0f4085af00fd740ba54268210e7ba4bb5363f91b1ba3cc73489dd03e5b0794af43febf0dc44965