Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 14:28

General

  • Target

    247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    247128f5d8647d4eaa4cb80a4dda0e28

  • SHA1

    04d03d0986f2565fd9c29dfe38dd13184ea255e5

  • SHA256

    58bd941163f8939564fa00b4b769c2d13b4ebb6bf3c165bb7d8e8bbe6c49875f

  • SHA512

    fd5e027b7dda82b85f5c9573268df8d87dd89517dc46feeff2c67aab01cbb6233dfdc6cd3d46931a5d81688a9b2ce647834b8a8c95a39a7b7d717d750d261345

  • SSDEEP

    1536:5q85TXW/STX7tAY004h+AaD7yUOW6OHhsuXVeuOsJ/WcpOm7tp:zmG5AY00CU7B/leuOmT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    789f92172abe1524cd43136004bffe3e

    SHA1

    d8d1218180f520c89e752052603c3f8e964f5a32

    SHA256

    7ab89bd8c8abedc5dd90f248d29f8fc0c32de1957342037150c389a6bdcfd0cc

    SHA512

    8e10ccf3cd9c955f1709d5a5239adefc2553d3e098df4032f8d4cf318a2c4ff3c7253b3a64be59fc3976ae5146829769dccc91f1d0c060a12809c09977ce3de7