Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 20:06
Behavioral task
behavioral1
Sample
23971790619852de2badd06c3bec4422_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23971790619852de2badd06c3bec4422_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
23971790619852de2badd06c3bec4422_JaffaCakes118.pdf
-
Size
82KB
-
MD5
23971790619852de2badd06c3bec4422
-
SHA1
6139dff12e4aa8fe11a619b2e998fd1f18fa6d70
-
SHA256
a2afa78f4bc4202db3b555be354aee8739bef49a2ad3159f104e6ad6c27cf663
-
SHA512
bbab1b2b8c70a8348345120bbebafc5d85d6bada7645582624e76f31621a0665a53aa0e475bbb4ee12ecc13be1bba671b3b5c9f3663b3f3cf8d773c46d72b0f5
-
SSDEEP
1536:72XmF5PHW0P/1URTuKQfpc7mahhcMFkJdZErKF1ncWJTOHX60LU06WspO2bGhdu:WmF5PnlUFZ4ahSskJdarKF1nVC20R2SC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2900 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2900 AcroRd32.exe 2900 AcroRd32.exe 2900 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23971790619852de2badd06c3bec4422_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2900
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fc2cacc798abaeee66c28a3715988183
SHA1770a90466a6be8997387e3787a4ddf24bbe35423
SHA25600f9e6d266b006a4fc727c3cbabdef476f99b6da4ef9175075a4407657bf6fcb
SHA51294e783207edc3d42fdad28355b6ff7d80bf3dfcc893f4c4b82c9bb58eb29e73087fd415ff00e9d07115793ce050de58848b9ce2a6dc5b457c07a06f115dc926a