Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 17:42

General

  • Target

    2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    2886d2ef3529944b364a07ccd26d71a7

  • SHA1

    48112add9d960071637708218587dfd9864425f6

  • SHA256

    8495619876904d1b257e3490db7bdd1ece7bef1f0de44603f24e6281175d7838

  • SHA512

    794be957ce3eba2dbe27cdec71f4ed8aa4a298dba911348378f499f6d661c08a78b6d99ef6088f074a069d9f9e43b2d98765b6ce0ba395c0604ec325edb108fe

  • SSDEEP

    1536:rjTl9uXG272taWcPDlXg5IeIR9jAqBLMJekHWkNpOPaW1OBcY5gSyZ2YEeUJ:XKD7KalXg53IR9jJBLhkoP+BcY5gSyZM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          71192051c415f1ce3ccbc4079ea81b54

          SHA1

          a95d1707d3b298679478e854fa82ceb9ea27c78c

          SHA256

          22b079b9b061c835e51f1b79825370725efc7697cf08fc302adc38c2fbf3685c

          SHA512

          d71caccce0a5da9c59e76aeb7b522e1e2c1f6a0c06057937ccc9f9607719b7782087466cc7d96e9df7ea03bcdfedd268c7de9cdf37aa5e06056e34db23afc51a