Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 16:56
Behavioral task
behavioral1
Sample
0ed606ac99b66873277a6b53b570ee58_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ed606ac99b66873277a6b53b570ee58_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0ed606ac99b66873277a6b53b570ee58_JaffaCakes118.pdf
-
Size
34KB
-
MD5
0ed606ac99b66873277a6b53b570ee58
-
SHA1
96683aca9c96ccbcfdc6515aca22c891e9dd8b55
-
SHA256
3106804285e964c65afc4974384874f204430247856ab474bed2813add15462e
-
SHA512
d2eef48f22d60bf08c55fd343b36a50defee1dd5f1e8dfdcfff0cf35d1bb34430dc6237d9879a508c9bde84cd7f4d4efd32302639c10128cf823cef423063a97
-
SSDEEP
768:pRzhsSTuBxHTIxvgQWpoU5C6I9s2Ts6V1ws:DzBiBBGgQWp/ALwkws
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1768 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1768 AcroRd32.exe 1768 AcroRd32.exe 1768 AcroRd32.exe 1768 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ed606ac99b66873277a6b53b570ee58_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1768
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD500e24d6e7eac39bf6a8049f7e789745a
SHA18ecafccdb3eca4b84ba55a4a873df7003a58ef76
SHA2562c593d8958beae5cd8c5ef58f0894285dad825e1b06dd727eb9f9fee0e15e56e
SHA5123a8a640cc34979cd9a40785d01379a3c717dd89f22eb3ccec62f45b20cd9e6a97027b1c96f6d195442828e529c62cca23bec257a564519e6001a141fbb595bcd