Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 02:19
Behavioral task
behavioral1
Sample
3755753184cbb7d0599b974588651734_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3755753184cbb7d0599b974588651734_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3755753184cbb7d0599b974588651734_JaffaCakes118.pdf
-
Size
9KB
-
MD5
3755753184cbb7d0599b974588651734
-
SHA1
68e2c5542a4769543cf4e8d65e7da7cb3a98e735
-
SHA256
63e621d8c9b7a39a243584bb2d0decdbf046c4f07001fd80f727358515ccc9e2
-
SHA512
6846041b3cd77c25481f147912ef5c813687bf60701498f2eb92969e853b4db6f75b4a232d51c547d899abd9b45bca23191a8dd1b4f12ad3b8c675b761f3ae13
-
SSDEEP
192:4Pz4ULMxLIKXHsfyxDd+7U619lYVgKISawBk84IO56iuj8qTqy/TRFqJlYkCu:4Pz4ULMxLIKXHsfCDd36fKVJbVSYO5+2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3755753184cbb7d0599b974588651734_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59256c9d7d585c020617eeba231a7f6cb
SHA1c4baf22dc5d4ddc7091bcf17e5e8d3bd805a8329
SHA256cef0e9d0146a36557aa75b3629daffbc942f44b16ca7596cf2efd31bfd5c41cc
SHA5126c45615c641f5463a8a7d4dcec3823a0c1f06775cd6d03c75efdd73cdb65217afc0496f5001236b046300bf9c7a0593180dd637aff2c3349e6f122ee12c8af7d