Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 22:19

General

  • Target

    11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf

  • Size

    108KB

  • MD5

    11960c7c9001c1ced218608bda55e45d

  • SHA1

    f9e2f6d1a55083bd0d5ebe1ea020f3acf8cea062

  • SHA256

    a91ef778a942112ca8be74aa293a3c99d0b5036754b085cf86fa428ed60b74e9

  • SHA512

    9a80bedc934828de3f2a0f4743c058707310072d4d86ba21bedddaa50865fe4b31da5ae78f8232e2054ed5c4f312262e58f1c9980f81694de430d59892472903

  • SSDEEP

    3072:2WAQ3xsPj1upE6nRdFtfqUdzKTxDkNbg3S8qqr51IRU2WoBw:2W5s7ApEARd2UzKTRug3Sb6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5038a04aa9b70eaf1b1e7773e7d39c88

    SHA1

    33651c5681985e840605a9a2b1329bc883091269

    SHA256

    69165045f9cc97af3ec25b9d8847e016d3555611d4d4c0d02ade2fb9b4b37ef3

    SHA512

    882c796f5e97544cb75402e3b82cdff09d7b754403f8fac8ac1fe4099962f91c42acb512777c9acddf5f32445414674229bdff54aebc406327d7595df9f06f81