Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 04:32

General

  • Target

    caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    caeb993987c5790be49ef6e3c4f257a9

  • SHA1

    fcbe7532068b114ee19da3fb966bdd906141c8bd

  • SHA256

    8e1f2888bace4570f798d37e1f2fe2c037d7607a31287aeb03c7508c20f5c0ab

  • SHA512

    892f6a8773a59bfc28f52335d564ceb7d4401a81ee3fc802a150714616244c928c9f7ab5d48de555761c3e63788d17e365b3122976d8d2d6121cce699b39cb87

  • SSDEEP

    1536:95W0J2+zLcSC/dw/kS1yEPM/WYXmDzy7oBK4ekzvZWbpONiWm+TSpqdYnvcDLe:m08+XRYTS1t0OYXm3sGZvbNVUn0+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    591576058e39c62cff01f3937967699a

    SHA1

    1da6e665eb9233c17cd947e3ee45b7388b0b8064

    SHA256

    9479171d89596f8f56e296950af207c3d038f029e5a0425b0d261ff8b3ebe62b

    SHA512

    c14e2d997e4f2d1b0fe748e0725d31cd0593b4fe2ed967b909ec25b5363802d8c8caecbd4964a55cd3954b7bd19032db98e8e964ab171c49c4cff71298e7348c