Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 02:19

General

  • Target

    c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    c8296ef15ed314f286da3a10bd410c5e

  • SHA1

    dbff3a4b744153dd817eb6eefe9a18ae75a34d53

  • SHA256

    6546dac57f5986c6f8ec3c3c43f34ea09cf6eec6e80c67d5e514df0d444b166c

  • SHA512

    61f5dd0df6f9fb71fc8dcf29377a9fd2533c7d8edab987596cf5af83f45a5823c9102bd6f93583e04f6a7faced63b7016229915702598997070d52b6994ab76f

  • SSDEEP

    1536:YJ00W2V0UFb2APzxpkTuG7BO+DL6o+6xl2a4F8Fxp+idGC4IxYlY1V+RYYQ:LqbLCY+DLBr2sxpeGxyYqR2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    02189fe354fafcfc8150200243de4d11

    SHA1

    280da7b9a0fa1badbd1a599f4014a6d0bda9bb9c

    SHA256

    f57932a55eda0674b492017009b667942dfb79a754181b7f1fd264c0cebae870

    SHA512

    de304cb47915d5f78bf91cf31ee7b3eeb70f785fa12c6b3e69372b94faf325d1d805afc0870caf6e101760766118d7d7103fb1ce7c654708fe5a825b783200d9