Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 08:02

General

  • Target

    1ce2dd8f368fe15f4d06268090a51e06_JaffaCakes118.pdf

  • Size

    94KB

  • MD5

    1ce2dd8f368fe15f4d06268090a51e06

  • SHA1

    a8a1367c6e8a09bd8961e035a6e389c2d4950c7c

  • SHA256

    516b67e3c2505a889fae0a1d1c4efce8641af7d1e221a159fc91ddd849e8cbd6

  • SHA512

    54b889b821cf06d6b0446282d825409e79d289ef29f5faffca1c1b48d6db7404533aec53efbf0426c6e7dfb1bcd4e53fdefa43bef1b388c16636220639a52407

  • SSDEEP

    1536:NRLJSgebi8kWm7uzBDPl/hfat2ipIfgsqepMLOUoyRnXvm44ediRGY78W5VTYJQr:PLJmbVkWUuzBDN/hq1uxMLXvmpedEtXV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ce2dd8f368fe15f4d06268090a51e06_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ca8c4af340085c2be1320ee8ff997298

          SHA1

          fd5134598c2b280f21f4e047e54e314d5217e8cd

          SHA256

          b195d30800156a548c19b2a44bdf1aab93eb53915e4de484935e5d6acf0be94d

          SHA512

          269a4bf0ead275b5f1144f489cc085515d1ac0e9a2e2ee885a90444ef8a7fba5ef2a585fb774aa58cc2c11bbb5b9109da917fe34e826a1fe75ef80f8ab47924a