Analysis
- max time kernel
120s - max time network
126s - platform
windows7_x64 - resource
win7-20240611-en - resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system - submitted
01/07/2024, 08:18
Behavioral task
behavioral1
Sample
1a91ee23ca830d5cf46b52d851380ef0_JaffaCakes118.pdf
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a91ee23ca830d5cf46b52d851380ef0_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
6 signatures
150 seconds
General
- Target 1a91ee23ca830d5cf46b52d851380ef0_JaffaCakes118.pdf
- Size 9KB
- Sample240701-j6958a1cnd
- SHA256 c72e5c0069b708b692f6db45fc00df487185af0793ef1ca0ef4c4e0545b5f096
- MD5 1a91ee23ca830d5cf46b52d851380ef0
- SHA1 b32a1f360fbdd7216e5b8d5db660e37f0224a43c
- SHA512 2e99de0d931e32d89afbf1ce5b8fb3fd28287dd8ffab860e90e261fa465896a37ca7733d22af27d1dda0985424474cd6d1d3103112964ca27630a32c257d5256
- SSDEEP 192:0Pz4ULMxLIKXHszs3Bz1Ma837oa5OWFK8EFJs+GXZcJpvlw1svZFIbl0P1L2XEbu:0Pz4ULMxLIKXHsA3Bhaoa9FUupZcXv3m
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2876 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2876 AcroRd32.exe 2876 AcroRd32.exe 2876 AcroRd32.exe 2876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a91ee23ca830d5cf46b52d851380ef0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 e4aac92e69d4522b2085b0e51cb281f4bea2f157a1225c7e3345b773b4ea7527
- MD5 25185ef5161485e35f6df63fa8e5bf05
- SHA1 2f829dd84a81b61c4e6bd2220e89a8623e83a3b6
- SHA512 0579e2add698ead1ad228088c1f47a900d56de9fa124cbf05ecb890407e5311e276e3732f663837fde71541b918cc6a5f2127398c27c5b9b2202bddf6c0f0ef9
- MD5 SHA1 SHA512