Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/06/2024, 16:22
Behavioral task
behavioral1
Sample
098f84b545cda18ba62931a5fffb3831_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
098f84b545cda18ba62931a5fffb3831_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
098f84b545cda18ba62931a5fffb3831_JaffaCakes118.pdf
-
Size
80KB
-
MD5
098f84b545cda18ba62931a5fffb3831
-
SHA1
46be3529e400eb29955bfabc7e7960226a1e6acd
-
SHA256
3898f4a84a435719004885390784fc7382b91900df0eb153b0ed47a3311d9a07
-
SHA512
8d41346ccf94f2bf2415f14141a4872807fa943a66652e3c997203dfb2f5c39e025575c75747aa6736dddcca5e17e882c3488eecd0fcbe4d449bc60a82cd8c65
-
SSDEEP
1536:k+J2RyXkshegHWRe5rFsOhFtGJ3lOkXXgVW/WkNpOPoq6ZfOWyrDi18nyAxflS:P2RmRH7FtG3lOkn6FPD6ZfsrDNi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1700 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1700 AcroRd32.exe 1700 AcroRd32.exe 1700 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\098f84b545cda18ba62931a5fffb3831_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5454656c89e4e1c230a141b63911ca0fe
SHA174afc72d62e67915965f954d3af5fc302783f4fe
SHA2562b34f9bbf846fac2c15ac512e8fa54689543e0d35d107efdbbe4383f494c2808
SHA512199cbc98b1e205d575c38cfb0a2786efca6b4b3d693602671833f69946a6b3fd4cb7542f9d4f8969dc5f327d80f9a4d0b67d485b5088ebe8c20d5f6c0c62b433