Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 03:02
Behavioral task
behavioral1
Sample
3bc1552760a340b249d106f055c97ba1_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bc1552760a340b249d106f055c97ba1_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
3bc1552760a340b249d106f055c97ba1_JaffaCakes118.pdf
-
Size
75KB
-
MD5
3bc1552760a340b249d106f055c97ba1
-
SHA1
359d2ba06e25724c03d1a84363c2fe77600ced78
-
SHA256
e0d06fe79104d4078d32d4b72055889d25e0b786ebe7c466c9d072614bca51f6
-
SHA512
c47cfad4b0dea34eaa9a7c38869c2f46d4e84bcb9bf0904802e7b6ec2fd49c59e7baa069e3861062b81fdbead90cd70633c7eddc72c8422a1d89de3822a895b6
-
SSDEEP
1536:zvCIn2zboRnmv5pjaEGiFOh/AivJUz2FHhJ5CXHeM3:zCI2foRnY58Hi+IivJIcHhJ50Z3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2336 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2336 AcroRd32.exe 2336 AcroRd32.exe 2336 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3bc1552760a340b249d106f055c97ba1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2336
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51bf15544c7f44c171721f74d226dcb17
SHA1822647126c35821927871804499d6e9d8c0547ac
SHA25638378000d4813fa33c37ebd09486e56cd44ad74ab471dcf47c524864b5ecacc6
SHA512446f1b185fb1eddee4597ebddcacdab0bb45e1e431ef38ce00898f37f746a7f48b70efed775eedf9159804e400a3c079728b025a811aeb2554481ac6a6997a09