Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 00:17
Behavioral task
behavioral1
Sample
0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf
-
Size
87KB
-
MD5
0b77690a2386300b32a8321b6870ddcf
-
SHA1
73256c15742434f13b8a2c6ef1d1ad02060a2b17
-
SHA256
befa9b18a42de6e4da7999d2ec09381c5146aa2644ee358ce456d0cea2ecd1fc
-
SHA512
065903d15b9e861a30c5ae457da2d9bc612d1a40c1c8e78af64dd29930f372255d854bbc82f2b75faeb7cf92c45a6f441277869974ac921d299ecfca39b8d051
-
SSDEEP
1536:taHZdH0zJMZXHLoVa4EAA0oCZuLzIl4WGpOKCW2UTkYERiUM8AUb:cLHBZXHLog4EAA0FIQKwuxERrM8/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2964 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2964 AcroRd32.exe 2964 AcroRd32.exe 2964 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2964
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c312aee53f93c2d69f3753dd9e44eb61
SHA16aa5f19630cbdfcd88840b3697c30ea3c9450da9
SHA2568edd0b48eebe8c8683311b580f7be9671788be9487aa93ba1ba0720413d9da5d
SHA5128ac7c9ab4b53a55f7daae6859914f79b98356a35666f8c2797e4424412fb521d9645cf91cb3dee67c7c2dd16cbdec011ca41fc72af9c5ffed82e5dbce1af2f24