Analysis
-
max time kernel
96s -
max time network
21s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 09:31
Behavioral task
behavioral1
Sample
67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf
-
Size
76KB
-
MD5
67069c7a2db2eb2d0ca7330e6d46fb95
-
SHA1
fb1da1989690e2b3ab0d365ef04b3df6038bb229
-
SHA256
007e75fd716f89a63b4121565a68f85446dab12b0dfac2c1e563c3cba073137a
-
SHA512
bf01c536b2cd40d29b34bc915dcc62ecc481e495ea1f0321bb4dd7caf58346df3cade7c970b81300c9e3db06b0bba2768894b0d06b99f8e3f71c650db2917fbe
-
SSDEEP
1536:ATJGs38ILTWYHwgkQVi03l9VQMc0zWzrfjqH3cYXWYpO2+WmnCBwnXwSZvFamIa9:6AIOYf0Wvjc0zWzc3cYW2EngmwSZvFJR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2472 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2472 AcroRd32.exe 2472 AcroRd32.exe 2472 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2472
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57b96a96baa360c182d043ad44a4baab1
SHA172ab886593ec0c112abecf40e38f4229026820e0
SHA25613282195085f039a08af711f25ea92d6524c3b29278b8d6b0abc1aec9fb6a0ad
SHA5121bcd4b0c0eb3b8e25c6fef36f883803fa7e0d054a32247311f8eed9d082d16c190d7f0b83ddb99f0d335f3d1585f0676e9fada6b5bd17a108d50e59d120e884f