Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:04

General

  • Target

    08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    08bb91b9a602127c3809b172484d4584

  • SHA1

    4bf85f08ad8567333a519b12ac1f32a475e000d9

  • SHA256

    e4867eb937e84c14cc8be5f7fe74fa72d3a696680ea742957e3f73cd25e88e31

  • SHA512

    d4865edb6a8b50c9b61e3dd289251ea12e9e978ffe2b0dfe9f6577ee5b878a272d5e08d3f11c5a862cdd6489a0678e2ff0d22627ae20ddb60c3aacdac15676eb

  • SSDEEP

    1536:6UGNuxvRdi9NBcmU/gYNuiG74y85If2moYZOabv2RG62WVfxfem868JCI1LWspOe:3euxr8uDNSb8eemosOabOG6ffJFG+Sj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2922a23464793c88d59bb19b2708c010

          SHA1

          dece4cfe8c1fec43ab46a44e5a55f8548837e3a8

          SHA256

          d166a6c755b4f7616f398c9fc59bd5e969ffc4e685264148e1c1db32cec7c025

          SHA512

          6423e8435da7a912e02f7d55e75e109d512ae89126e5da237012132bc9f9a9c432824ea82e3b48fba3c52b11297c05c0b187cafacad711c8f8a93560c98c9b1d