Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 15:52

General

  • Target

    bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    bc610e78397117a0c330b42bbf5fe69c

  • SHA1

    2b9d8c877055a15094031a7d2dabaaaa669da391

  • SHA256

    0beab070966ff51cf2f4c2612b63893d03c59d81fbb4771494bba1ccf8238e0d

  • SHA512

    3e400e4bf608812fc73183e9626aacb5e3b2b6d168516d47a2e9289893f298f58b70004e69366e3837710a27fc6b22fc53a2a1b957cea2742bcd38b7f0c476af

  • SSDEEP

    1536:OzRUyJFgDYnHbGQWYq5CVNjTYrHQDAw/UgJylVjSWHpOvTWC2R33j68CC3MR2FC:ohQ+HyQWpwNjMw//JyCv068C5RR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          800764d55b6497850b3d7d4ebde3d3d8

          SHA1

          ceb5e9c8cb613370ebe00f805abf897048099418

          SHA256

          257dda8f0c9f7f92fae635030db10b9730890af375fb127f6f2d2962c0ef3b62

          SHA512

          5880f9ad9e0ebd202083d61a45dd15cb0d60e51bac962f1ef2088f10500042d37dd1a5ab80bb461f856d041c34d1359596b4fe7e5c3afbc961dd2baf1cc04393