Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/07/2024, 17:43
Behavioral task
behavioral1
Sample
60ccf8d9477bca62d535c6d94aa7ecde_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60ccf8d9477bca62d535c6d94aa7ecde_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
60ccf8d9477bca62d535c6d94aa7ecde_JaffaCakes118.pdf
-
Size
80KB
-
MD5
60ccf8d9477bca62d535c6d94aa7ecde
-
SHA1
bd891c44560a170235d6a09e1f7c9cc12c7848f3
-
SHA256
286d29f091523e35df61d28d4a06124f825a9c60bca87bf33036f8f6a9071fa8
-
SHA512
56a747e92ff315322367e19adbab33ed332199289d7307afc9032cf0840279623e39288eb9d5e9fb61dae30361d6c1173d2c954d95554681a3f6065079a49e45
-
SSDEEP
1536:qeGS/B3jfIG/37HJ4Rh4BhedzWYpO2+W6tbsVFTp8nfLCcTUch:GS/B3jASrpMh4Bh/2YsVNp8fLCab
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2160 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2160 AcroRd32.exe 2160 AcroRd32.exe 2160 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60ccf8d9477bca62d535c6d94aa7ecde_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2160
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56c6f6c497d8b99dd76621f377a1134cb
SHA10757b88ba40e0a3d95579354ad659558a8e9cbf3
SHA25680d651156aa01d3573e1e0d85394a0213aa8c10b21637c4385c00a75ff28fee7
SHA512974c3e63157002a0feb22858ced69513523a3f9c5a38f07f8abda681819233a67dc2ac62853fb05f7923540b7437c41280d526479d93df6947eec63291f50eea