Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 16:27
Behavioral task
behavioral1
Sample
28d2e4e923e0fd307ef18c29935122e6_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28d2e4e923e0fd307ef18c29935122e6_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
28d2e4e923e0fd307ef18c29935122e6_JaffaCakes118.pdf
-
Size
51KB
-
MD5
28d2e4e923e0fd307ef18c29935122e6
-
SHA1
06fb7df2a983dec38a8e2d056b57b67b33161a47
-
SHA256
713d7da35aa2a4c1a2d24fa821c4a94fd3ff65c65efccc29eeb394d76de6c5f0
-
SHA512
f731ed5eef4dc0793ff5d8ebe3a72bfe0a27dd74d92ff3b27b22fe394ceb782ce2e470efe8caab43e10a915750831cf4c853898bb290f74e9a8329349f2b547c
-
SSDEEP
1536:J4x7JTXUimtUpzngX1RaIFcmceq57X7HiTPB/yRBPDPRB:aBEimt6nsfawQVJX7HKP8PDb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2724 AcroRd32.exe 2724 AcroRd32.exe 2724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28d2e4e923e0fd307ef18c29935122e6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD568105b896fe2257389bf50684b30b43d
SHA1e1526f18228eaf074dbc8a26bfdf2ce50d9f5e4f
SHA2564d89bd2fef930cccec6d954e76f14d7a3aefacdc22960197f04844b7ee13ee5b
SHA512e79d3edd93d5af56ca0e8c075767df8b05c4e5cdeb1104278e5112723bb7cf6626cad69a0e5051de942959aa7619e07c55583fa89b0a2c051d8918aced2db021