Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 15:48

General

  • Target

    260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    260160f043863aaadb2994d130cf1e96

  • SHA1

    dbd4512a33b44afb919d76b1dcc49a018b75bd66

  • SHA256

    204ba82d9e87c611b4d27d8b411ecd9b6a7f1c0d630f61a827d03a31a5ff6f69

  • SHA512

    836a1ef872d6bdbe383434672ff5169484808b4d1884681454c73e94a0d196130f1bf7432b7748a295133401b0a1e80140c22225a6dedc7a66919b7d962ee514

  • SSDEEP

    1536:5XnPVDoGvcoGXI0OCQ6AfQlcNMpz1/IF6xddN8AYwuOfWv1Z4uWcpOmTPX:NdEGiGF68dav/7xnmAJuOq16BmT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    74b82aa93ba4f05ff762b801a64f7e52

    SHA1

    b63a5218ca2cfadba9f78fa891071cdcb5d5487b

    SHA256

    4f2ed422b9fee7d2ce3fb6e00da5753168e7b282291441020a6cc8984c6f8967

    SHA512

    5a823efbcf1b6d38491057ee0ffd35efb6fecf05687278e01398f8b36ae67e936d611a42f80fa1f817825d1610a71b6787ef329bb3ab0d01f595a05260dbe8aa