Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 21:38
Behavioral task
behavioral1
Sample
4370edb7b068f54e6ef136ee979c41ca_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4370edb7b068f54e6ef136ee979c41ca_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4370edb7b068f54e6ef136ee979c41ca_JaffaCakes118.pdf
-
Size
86KB
-
MD5
4370edb7b068f54e6ef136ee979c41ca
-
SHA1
f1e5d1f4bade1cdc7e347b9f5f9fc72da6c46271
-
SHA256
7e6aa80949c1c0fdc8bd2806a978a7de96689eb63fe57cb4a7a81472d48e79b9
-
SHA512
40dc61f572edd3292561fe78e7dd2f1cb135c11fd0113aa947016885a57c65d7aa7df6f2b7a2199883e43139b5b21061fff8b2326907c0e3002b63879320c0f4
-
SSDEEP
1536:LYQ4bNq//pxbXZ8D0sFUMvaMVLqWddvRvMWCpOViIWdenAz56FcG/KRL27:Vh/xxbKD0sXvaMRqWnRvVVi0+ocG/Aq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2148 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2148 AcroRd32.exe 2148 AcroRd32.exe 2148 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4370edb7b068f54e6ef136ee979c41ca_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5921344a0b9a46326c9b8dedaf67969dc
SHA1b3325938fa9d4a90ddbd5509038f18853b9f1fb3
SHA256483e8c54d3b51954e97c8100c9e6a58a5bbdf5ea34937406404e90ff7ac27c9e
SHA51270d7e70c460d637839327fabbcabbefc00ca29e2dd8e9711454b8e578e389996ac9d24b8cfbc565779e514ab50f0b6603db96c4b501387f5e975363001cb5140