Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 01:38
Behavioral task
behavioral1
Sample
59f1683368e6d5071605ee6897724456_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59f1683368e6d5071605ee6897724456_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
59f1683368e6d5071605ee6897724456_JaffaCakes118.pdf
-
Size
77KB
-
MD5
59f1683368e6d5071605ee6897724456
-
SHA1
9d2f53bddbed5fc18b4b4f87e02b5c8b6537447a
-
SHA256
495bd7ac9889b7522b06c824b02eb4b3d42fd40175a50d1abb3f7c765373cafd
-
SHA512
1714e2c0d0c127b7eaa11791534438f48b980310a99e8d17b1e6f2c51175da311233815608209d80b5e060d10f73b511847a1f6f5635b6cf7d17c5ceb3dea631
-
SSDEEP
1536:N3SqBsYup4ixQiZbNz8Lvi0F7jZDC6WGpOK54kMwGuWo2pFEh0OUd:8MsrpDy4Z8TiggjKBlGfSh09
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2376 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2376 AcroRd32.exe 2376 AcroRd32.exe 2376 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59f1683368e6d5071605ee6897724456_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2376
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e49dfe6feda1a65ebd54abf3e4a99b3b
SHA15195cab37c3618585e0f42963f4e727726b415cb
SHA2562bead62ce0decd362ab794845c12179eb610fd343b7473f9a2188a7a4ca568f4
SHA512b2895439ea361ff1e70c5763c83f92da983b67d562210c5fdfecc98e4851bb1536c84a2fc9b7749fa2dbab15a696c8f9209d21c52001b42d772f729aa2a896d1