Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10-07-2024 07:43
Behavioral task
behavioral1
Sample
33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf
-
Size
7KB
-
MD5
33d6101d7d4110211c485198a2a68480
-
SHA1
0700ba126ec20a96989d712ad8e7683edff4b2ac
-
SHA256
370c8da741a7d8665647e219e277a44f66d4685d598c248d4f83fb3681fe4106
-
SHA512
b942af9034f1a006b924a131cac8b7cc187018144415b515af7ac8e1dfa820ec1c768a95b685e322811b2d826933f5d70c26b1994a729026bf0262530eba4d70
-
SSDEEP
192:QP5ufkuU/wsZOAZBREHa26BwbMVAVb5uSqyhtW+olqYS:QP5ufkuU/wmNZHEHa26BeMiVb5uSRhtZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55e40028a63d468314995b17ee6a94545
SHA18314bf9c6d59bafde7222031cee1d46ee1e515d5
SHA25631605a1426f9f99d3f6fcc67ca565fc091498d127819b8c124ffe82eaf4c8e87
SHA5129797b03180272f58ae36053ffa6a977973d7bc7e25f4957b1c436346bea58a7387f8739ffaab17e3d4fa6da837f6bc7a13f39cac8ce1cfd169aee96dad16317e