Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:13

General

  • Target

    08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    08ea90468bd52e13057ee92cc6596326

  • SHA1

    0f82ea20ad9f2a58fe24adeb06409feadbac92c3

  • SHA256

    6b3d8a3047103d20252e2d8ba3fda3cd820a0a77736e16eecf73e58034521b28

  • SHA512

    b129dfffca24401fa66c4ad56625a0f9e14b0f1e185379e7b958ff13fbbcddea899d8a4b5c315070cdb6816b29ff88623f5ee835428801bef7877993a4dbb431

  • SSDEEP

    1536:mwpbRwTMdZRB5fyPpUQGgucUZi4eXzIGHSWUuT2U0h0x0si2WcpOmFybY:B+TOjk2QGgEZxeX/Hyw0Wvipm7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c1510944855ba443e4d0e820da79e52e

    SHA1

    9acf7cc8302d65eb88c3ca8557fa758b2bd8b4c7

    SHA256

    2e7b25ea5265664f9cf62c1650507926c840b43c5fe774888d2791a436169bba

    SHA512

    457088e1270447399aaeef4f727f8c524532224f777452f557a7ef609fa85ee5bb5b391d5303b121a08a39f53bb65de6c908f71d86579a78130eccac4c996568