Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 14:07

General

  • Target

    07837a364027ebefa21a0f562bbfd101_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    07837a364027ebefa21a0f562bbfd101

  • SHA1

    ed2b2f150f42fb54680d8ab91df68ddd1e510ad3

  • SHA256

    f56ed87c2484f3c2c34cba6079545b330c19efdf9c681d140e39fb9a85d5a24a

  • SHA512

    8903307d520587b7a1821935641904cfc422706e0a4162ba0024affd74c9ad750b0c673db0e3723f26fb254311ceb74e7e0f513050493ac845b50cd168a8aa4c

  • SSDEEP

    1536:cUDHDA0X0FPyUMBQBFz4uExHSpJE720gbQcmndUWOpOZyWzdt2jUA64FKrYkc5w:PDHDA0QSMsdkYgbQceBZbfA6QKkm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07837a364027ebefa21a0f562bbfd101_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f74708a69d3336cfe439a916fec910e2

          SHA1

          65a5b379b54c7730440de6259e5171e97db0e528

          SHA256

          48aacf2872b3ea5088fbf676ad884a4c4630a5f722d82d56da80f903bf892279

          SHA512

          70ea113b2439625f9a9c270ecb11e0f8f9156295d92ea77c94122df3d908f37b22363b2071fb2871ef4a2231f9af5c131eca6b13d0eed1e940a63228af253758