Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 04:19
Behavioral task
behavioral1
Sample
249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf
-
Size
39KB
-
MD5
249b70cd6ff4a6794b5f0f8a2a603076
-
SHA1
d165f9436ca863c3e62ad50dd3a22702755d6e9c
-
SHA256
970db861d2df60cf8027d05c0890846a47f36b8b7499f8bfb492d054b0f032db
-
SHA512
c5530931504bee393050d0b4de338f160606966cd9c7c9a38769dbf036f10131671776f1603f580715de34e3b19ea87747d9b3d9ef3de47ed8471da4981a7366
-
SSDEEP
768:egGzpDXhzFxixtqXBFL8yxKqVMm1Su0IY0oi+/EAYPhtSA:bGFbhzFMx4X5KqKm1Su1YrNEAQtSA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5172387def2926672481e57a6b384edd6
SHA176a1f18c2798731fe2671f974f3207153a8afd09
SHA256267505e35cbe91614ae489739b9aaa283728faa8c1bed42567bfbeb9d9fde92d
SHA512aef810fb1cc85fc46dffb8874267be705bb16f5df9e28cba1afc438dea1eb1e47a114ca925ecdb047efd477a601bedc8ea136d8884e643acdf322368aef23087