Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 15:19
Behavioral task
behavioral1
Sample
167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf
-
Size
85KB
-
MD5
167ef4e22ce9ff4483adb1c3a6bf9a20
-
SHA1
184de7529b94ca80b0a0e4786792f7e00259c363
-
SHA256
3fd95fd479896ab56efedad6c78c4f3081e8c93d3a3b17e81eb8c779d600a373
-
SHA512
0d1b5570cc7058ad1605c5137180fc53ac2d59e6bf77989db5075a3a95f378938c397b217adcc08130b8015b25b1107a560a69b3a141e589eb1c5f5afca90aaf
-
SSDEEP
1536:goHHFVYML0xzCjJzSOQJMiT2ZTECWy/4NzWXHqRXV8WQpOCwM6SIquEK:LnX0xzkJzSj5T2BDXSV7CwW/C
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53a218bfd62cda5200ba4e30d6357c82a
SHA14b4993f893517456beba4d3b09b58562a7a858c2
SHA2563344082fa317106bcd04ae3a36c8625f377592dd8fddd76d0f684677f0a09992
SHA512209f8d36365682e3b24e801ea0b4f456da9fbeb6a236f697239ec42f0f0ae96c049b267655b407e8e760f8e1e90e8368a3fb866970091b7f8da66d78f3523af9