Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:11

General

  • Target

    101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    101b286c71e8440afeaa2590dd21015a

  • SHA1

    146bab7609dd96e9e848e601da2da66844f1c2bb

  • SHA256

    c1cfb6e79e348d5f6d678cb4605c8d5c0c334c3a9f94172b43375ab166ecf169

  • SHA512

    39cd08b65e655ce5350dfba52ffaf30ada99fdbda2cf7cd0b17e451575dd9e05f0b27eab3bbed0e17ee095789894b612c7d7df76e57d6c8beb6c192b68973909

  • SSDEEP

    1536:6sXxxMLDjFWVTRN01tOjwbWkInM3srOAsQFEnJ3fiijqg8h1SWhF/yQUWwpOS9Wt:DXxWLvFWFRN4tOoWkyM3srOAXIfii2zZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0f908a8569566fc11dcaaab1af0d8190

          SHA1

          7fface52249d97c8180d62a18a2aa13219a47768

          SHA256

          daf490d17b31991551c4336ebd0c4820216f9f1107d0e6c4ef35413b6e860064

          SHA512

          a32135cc318b7184bc01ba4be175759e7bfe94b1874124637da4a5dbfa9404ed74bc0c1cef48e98c6c09506a6b2c4215589843f4db9a2f4c63dfcf8c6998048d