Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 16:14

General

  • Target

    bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    bcc5ba528dac8c27aa354765b9f40b6a

  • SHA1

    77e46953338c2a0ef53adc144b966fec69574b4b

  • SHA256

    94978f539657b98ad155c6079e645014ed8a25a761cb1555d89ca75ab92361fa

  • SHA512

    4e1f5d618028a61c2b8ab2acde86e7176f2bdf5fbbf2a6a1c1670730f46a816481a8f50a1bd56fe9c3071da4882a1fd54c0691b6ebd75d4dfd09ee566bb4e628

  • SSDEEP

    1536:GWyuiMEIz66rY4C3iQd8xHv4KmW/TuWapOtQHWZybhpMuneXViP5YVe:/yhhINE4HvAW/TztQ1iWeF+v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2760

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f8ceeb08cd3aee08cb14cd8d051809fd

          SHA1

          198ca2fb13bbb98232dc7fcb22aa5c0c631f7dc8

          SHA256

          7b82510ccd04e678c7b1dafc2a272edf8f14f1fee8761d85f084079d7ddc9f02

          SHA512

          836ee0deb1231fa9de0982ff085068445b8dfaae827bcc3855ef986eed57fdcf5f6e82a2d742c03d50132a19a839e573b8c16849822a3ad12eb860f24794b643