Analysis
-
max time kernel
93s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 08:28
Behavioral task
behavioral1
Sample
5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf
-
Size
7KB
-
MD5
5b2ae374477ab3378180df87124a405f
-
SHA1
d4c7a8021379a0631e91e25b2471573afd6315c0
-
SHA256
bcee361181ecdaae50ec5871fc64c2b9c69c47aaca22babdaf2f040a6838bb54
-
SHA512
2a0d8e9588adede12536e74b4e9ea75b0135c49b80919557300bda3a48465fe51b85813b5e361a9e3eaef6122d7c6c9e97703fc12d5fb644c6e8ad891ed860ca
-
SSDEEP
192:QP5uFm4kUge4e+g7s6y8jujpB2C5zuxiH5zLN/D3Gt61STYA:QP5uFm4k9k9y8GX5zVL3Gt8STYA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1932 AcroRd32.exe 1932 AcroRd32.exe 1932 AcroRd32.exe 1932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD517f14f9b076a844a17c66f2389a3819f
SHA185a6b20d3d1dc249ed5056cbf22b4f6ed5323414
SHA2562efbfa5607cecc83ec8f60b18388edacba7fd8247793ab525ae26850328990e1
SHA512aabd6b149b8dfa58411cd5928339e39037b5cdd3e0b67a06b77287802fa6549d1fc38f0e9f5ea56e4424758e076379f166c55b9b42a0c6565c2ff30bc6d565f7