Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
28/06/2024, 03:44
Behavioral task
behavioral1
Sample
18a9433754b6f951715fcd27432e7b0a_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
18a9433754b6f951715fcd27432e7b0a_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
6 signatures
150 seconds
General
- Target 18a9433754b6f951715fcd27432e7b0a_JaffaCakes118.pdf
- Size 11KB
- Sample240628-eavcnszare
- SHA256 391dc2bfd09965dc51161eadff6dc72368d41043cdc47733e383cba419b9972d
- MD5 18a9433754b6f951715fcd27432e7b0a
- SHA1 19432aede51b63603a79973ecd01256f40a7ab54
- SHA512 3eee3dfa429ee942c0ff01257acb6cacf2d2e7126487c4ea7ea9b040ceaf3bb419ea10d80d251b69e5a7bbd667e91091e54b28bd7403d4842c05b5949994694f
- SSDEEP 192:MPz4ULMxLIKXHw08ved5PGvVAXeclQGQWlqwZi3BK13ebTgIZX1XSmSxwqo+HnLo:MPz4ULMxLIKXHw08vCgAGOZwbVZl3Rqa
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2056 AcroRd32.exe 2056 AcroRd32.exe 2056 AcroRd32.exe 2056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\18a9433754b6f951715fcd27432e7b0a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 1cc3abddf3f761d1394f2120d6c1d7495a2ddb81c143c04e4820455bfe4f721f
- MD5 1b5de7748140e7f03b231a9d1faaf332
- SHA1 a7e769932b7afc36bf94a4af4fe13feb40e53438
- SHA512 3d1cc145287a014caea8572220c4e8496330ca4996e36d20647090278c4a149c8977eed59f1b5ff6e06e18ab162cef58edb0d60fd04a7e6940a382ff7d018fa3
- MD5 SHA1 SHA512