Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22-07-2024 09:39
Behavioral task
behavioral1
Sample
62b707062b3103d55ee6276d149458e3_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62b707062b3103d55ee6276d149458e3_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
62b707062b3103d55ee6276d149458e3_JaffaCakes118.pdf
-
Size
49KB
-
MD5
62b707062b3103d55ee6276d149458e3
-
SHA1
63bd3cbffc515d910e16f982c92f29411482dc89
-
SHA256
1de1f914389bbb9a10602df8580ff07eae31213285f3d622aa4cefe1a0beb22a
-
SHA512
506915213e695dd3265810156bf1c7dd8fb0c5d34cf1d464bddf3570805db43af09e0874684ca1ff33b1f4449f1fa837d5ce37593d421960371f68b8ccd27558
-
SSDEEP
1536:/GFPvHQ9IYcqEBMSnmah4a6WM3ygV5/r/:uFPircBB9nma2ae3ySx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2608 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2608 AcroRd32.exe 2608 AcroRd32.exe 2608 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\62b707062b3103d55ee6276d149458e3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2608
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD557effebfeb9d5d210a92f01987bff617
SHA1dbf565b0f4aa5e424d6456a182e00f09f41f89ee
SHA2564ea5d9c8f367e0132406f3a656f3ae412cb66e353f57bf7e26b21d3e841e4b6c
SHA512d96f0fb52b3be06c0509956b972e08de44dd35160e41631cc3773af0bfb73816290596c026c8030d4781227a4e2e1cca4702b9b609c86f8cf185fe78796a4224