Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 14:04

General

  • Target

    23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    23f614b1c8a603747b2b87dba8198e60

  • SHA1

    61e211bc72b75971bc8d17d4d31a511cae60ed1f

  • SHA256

    282265ec1ab6bd4b1d5edcd6fdb68946991941ee61f42a1953539ca6b2237c54

  • SHA512

    f53b5a4384784b75524679b4468fbc5b4e4df944b92bbc6c56c540bd56072f137e861ad5dfdc3f11c89408e076304fb2296ebdc3252d4c379bffdec4b1275cb5

  • SSDEEP

    768:jF/M9vAViG0Xwpd+Dz1JGD5Lz2EbgthvkKz0eJdK0uvUJ8hJSrV7Gqt:jWAu+y1J21zjuh2MdKxU8hcrV7Gq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9f077737c662afa4d456aea1e4f9be2f

    SHA1

    a34eb13120f0798bf822baa016faa506b5bb622b

    SHA256

    d742217627504b852ea568b71d5abbcebe26cb519a76ca9633f2e80c13e5288c

    SHA512

    f7f0ca93323e8f034c8444825dd07364fe43ffb945cbf87386fe000cf9866fb3fe375b7367d96af8dd0deea4bcd624a69fb59e84179888adf952bebdca8286ff