Analysis
- max time kernel
120s - max time network
121s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
05/07/2024, 23:54
Behavioral task
behavioral1
Sample
27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
6 signatures
150 seconds
General
- Target 27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
- Size 15KB
- Sample240705-3yavyasbkf
- SHA256 bab8136dbe0d74c5ec75fb2778dcd6a02ba0296019bf8e99633e0bce3c48d76f
- MD5 27372c8088d10455b72860cadcb07fd1
- SHA1 5cadd6e291893449f44aa853e0a31e457abee9a4
- SHA512 f25d3d119181cf0627684c1bac196a5edc5cf3f3256399a81a7f45fa81cbe3cb432ed4c328e2c97d9744683882713edcca92b1b378d0d6d64fcf49ebdec4745e
- SSDEEP 384:KP5uqkLaNlm+gTl/ozxEuJYk4EtWgwKT9sPp14x+skUm1uqdiLY/:Mm+g56xEuFIfKCPp142UyhdD
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 880 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 880 AcroRd32.exe 880 AcroRd32.exe 880 AcroRd32.exe 880 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:880
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 1eb1ff276bf3c2800261966f77c3740777d39b34675e9f38fa1b98432727dad1
- MD5 ef4b82dc9e9b582e56748eb61c0e60c5
- SHA1 ad6924a4af55126534584404646d498e81785a93
- SHA512 b1bef65f476f0d8d41c2fbb1819edbc4f06054ed3aa33a8147cdae17d585e05827e7990e390dcc6c3021253bd0303d7039fdbd9d90113ac572a055ce2a0635ee
- MD5 SHA1 SHA512