Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 06:57

General

  • Target

    1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    1b8e5fe6f539c6fc4c072bf183b34e41

  • SHA1

    0f73743b169fdf0f89e68ca3217e091ca0ff1656

  • SHA256

    143b434ee34d5a405eafb198ffca2b957ae856f1c3e51ae3cf891219f9edbe28

  • SHA512

    e11d55bd9b8f23ff900bb9084dbfc83898e9e6f506b80f52afb8fefc19b6d1aa498e3064b3cc8d9de6504634c078ba18bf87b992d34805c9761e99f291469351

  • SSDEEP

    768:F3cOKQT8p1FoPo2SKRmVuDBTr5YFutGO0Vm/N0N4NYW/tb293u2ls:lKQaFwRkUDB5Qu70gaNod/ps3pls

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9ac6aca38282c4598e99f631f5e426f4

          SHA1

          8d84c73480cb4f623145293e52e161af37622481

          SHA256

          863395da13a014fb5c6eb7c5c587ce93a272669971969adc769c9c376f3403f0

          SHA512

          73f52e4aa68f39d3cec32f5bc51c9187d6492a0eab555e3c4eb20e88a31e7af734de9b8edeef10f8c300ed442d752d818c48f9016fcf7d731ed4ce5d9e32cc24