Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system - submitted
06/07/2024, 16:32
Behavioral task
behavioral1
Sample
28d6a6ca631452566c6de3067ccb2853_JaffaCakes118.pdf
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
28d6a6ca631452566c6de3067ccb2853_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
6 signatures
150 seconds
General
- Target 28d6a6ca631452566c6de3067ccb2853_JaffaCakes118.pdf
- Size 9KB
- Sample240706-t1597axejg
- SHA256 3946fad0a47c25b1f4bec7b54affd5d3b887f071f9864abe4975fc0c80d59d71
- MD5 28d6a6ca631452566c6de3067ccb2853
- SHA1 818bc05f9fc03621afcff5810e31dcc84defdb51
- SHA512 93a1ecbd6e91f11349347d884facdf94a4881a7eb0b220e93459ad05e5bce9daf6b8aff689d0e8cb93f5ebd74d3059facff2768aaad211fc23a5a268e31726a1
- SSDEEP 192:WPz4ULMxLIKXHsfyxcht0fXSdKpsAnDaEQmujT8RZ9qg1non8XgDMynkCy:WPz4ULMxLIKXHsfC6qXxsuUjTvDtDMa8
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28d6a6ca631452566c6de3067ccb2853_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 a49f54e7eea35b71bc4b82af7426d9c274f2317208e3cf40b7bee0580eb6c3a3
- MD5 257b0e994cb5cff1b103d54d4a7cceae
- SHA1 e33429b1f1784fe8f62586457bbb51726519d1dc
- SHA512 d958fb270ae97a44e93bf078bf5ed0c43d244c56afb9f6dd4423320deb7dc4e1dd9014552c949ffc36fd1b1dff9206646aee3296aea04da1b7bd8db70da9a57f
- MD5 SHA1 SHA512