Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 16:56

General

  • Target

    bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    bda4bf595693675f9768ea9ef707d721

  • SHA1

    08e043c4095a0cee20dd7ef1c546a4b9ede2f456

  • SHA256

    3036bf2c5010d3a0be2e2c09934493be4545c1927cb46b7083afd161ecca2d9d

  • SHA512

    3159c8e2780950a8b93a9d8cb4bd4c9bfd53cb21e03a495c7dfad635d6bcf17cb8f03fffb3557e421f2cf731242d4964182585809db9c1ba7014dbd44dcbe678

  • SSDEEP

    768:/PKTjF70J6ieDSl+9LGtFMhHeIUxMGb6rNqmailllfbLjuBw:3KTjSJ3x+NGrI8x1bdm3b2Bw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2484

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          17229b895e52d5d305d2624d82e4b6a8

          SHA1

          768c833382b862876d7b545b6ae4fbe83a755415

          SHA256

          c72dcb264952e47484c17a6e4941e30098c2ad6a1dd5eb6f3f554111923648ff

          SHA512

          dd6c4eea9a9252cbfe6a9151a78f6b192ddde08c6a87044fa073654677ea7e4a2a094f7a61b3920792f56a7da8046df1a66ae57452dbe8c4659a25076111d6da