Analysis
-
max time kernel
93s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09-07-2024 09:25
Behavioral task
behavioral1
Sample
2fd027086f826246489a0b4634469361_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fd027086f826246489a0b4634469361_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2fd027086f826246489a0b4634469361_JaffaCakes118.pdf
-
Size
4KB
-
MD5
2fd027086f826246489a0b4634469361
-
SHA1
e44c30fb38e724de305dc7b7a95bbc5c5562e949
-
SHA256
c6391b7930e924260ceba376f92ea701cf9865cd84eab3149c4945ea4c064c50
-
SHA512
f061b436b4a2b06032cdbeae8e482bffd20927fadbea96cad306c7de62115a9c764403c4c70ff659bc4cef5d4e447b2ea661259c1cf40d0d670c9a1c578bb7db
-
SSDEEP
96:40G1oBwyGL5mRxNX7gk8yOsMBeBLCqjcDipZ94TSp:40G2myGL8RovmCqjdwSp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2fd027086f826246489a0b4634469361_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2124
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dfae5e3562b549465931353135f9a713
SHA1ff5eb89f1e9cd44896dc4d95b822790f7dc5afc0
SHA25646fc23d5a6c3c20012eb74fbdd5cab8625adcdbccf5fedc067c3ef6333c82103
SHA5127904e707cab93ef6e2e6aa3a32565ad04d5f8010843836b243954b06fdf30032ce9a2b460f8356a5c566b8df8ae801181cc42e9e7b9298cc41913645eab62aa4