Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/06/2024, 16:06
Behavioral task
behavioral1
Sample
097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf
-
Size
43KB
-
MD5
097e3df4495253e3dd6ece2cb01e6dab
-
SHA1
e811a1c7cd5b8ecbc3ecbdc8bf60a4af6f67af8f
-
SHA256
0212d8ba09197d81c5c1d1bd1b593a594a542dda4b4e0e23484348adaee2cd81
-
SHA512
debedbbe4a9cfdc9f3fb98359ca1fc12f4f27c6f5159c502e8904feb75a551b00ef4d3a741acce8bfc3c67086e04200343fd5c28dc7ea03896e732085463c12b
-
SSDEEP
768:sgGzpDfpUG+APW80/chTNLFRqQyn4zGy/5D8/n0UvpxTEclFX5vYIX:pGFLpJTBqHn41wn1phEcbJvYIX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 352 AcroRd32.exe 352 AcroRd32.exe 352 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:352
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD559fe50703b5138693e5c56eee07b4d4c
SHA1567cd31b920f91e20dfc4e634ac01422c1bdd0f8
SHA2562558bf8258e6d3194db221911a868bab3a2e2810004b9bc1f08b7dafed6209c5
SHA5124b42655231531e6d33b6e87ec74d1893b2c137d22690143b2ad13c12e5d497884ce32155f1eb26bb06ee69eb424881f2aebafc39b15f9cfc4bb5439978a22174