Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 19:22

General

  • Target

    c0a3ad2c9cb36453f33a96c839a95576_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    c0a3ad2c9cb36453f33a96c839a95576

  • SHA1

    61cddb086d07a06f4a285f5751e86a7d635f05d2

  • SHA256

    08e451ed07a5844eb5fb4cf3e5be7980488247a883804f1b209cfcaccc4af02e

  • SHA512

    e69a1b06524730dd40a4b20fe3121f01514e9ad756da2a22e8ec815c44bde24e0ed903c927b72b651824bc1c0edd9a34036948f9ab3d3e2b551bdd8377018259

  • SSDEEP

    768:SgGzpDSoilwzR3ETXOiALjZjedNcMyDqhMHCjhTNzTsTLb7Sn/CjuJL1v:PGFWxALF6E1Dq2CjhxzTs3I/GuJL1v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0a3ad2c9cb36453f33a96c839a95576_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          af45edee428c7f4950cc144646c814c5

          SHA1

          b1f4247fb087474b0f23167819b507b4b57d581a

          SHA256

          59984659902cc1f02d433308b6c95ebaac48a53d3c289af640e4dfe761a224d0

          SHA512

          68febadb14415731a2b54d6efa5c052d904d6fa137f2d4e424de9c5a7cc7b917865c3596cb370211081624dfcffbb03e4d1d7bbaf1b3a9cb8a5b5ea72cf8b6f6