Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 10:49

General

  • Target

    d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    d1a9623214f6c91dc6b2898b2d3807a3

  • SHA1

    39f0334b5a2234586d8f7c155c325ff00d2fee49

  • SHA256

    3fc85fa5c0e61aeb5cb6092bcf4e8e443c74ab05624bfc1c08eec7ee001736ad

  • SHA512

    60d3fcbc23920014e4b8b135a1baa852435b3f0b1856725dadae9ad714a75c2580ffe39e9a60121258b29f2c852c036447eb0107266bd76677e8e3621674f276

  • SSDEEP

    768:XXghVkT2KS++zXHzqUY+M6aBablFXgp54lo4sxyMv:XXltS++a4MGIpydulv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1412

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c445854e236537907d12a096ac98d562

          SHA1

          a4b0a1f96879919b01f857ef18b6130df529fc0f

          SHA256

          8b7db3f7e529abe258c701b8958b5d0e88ecc8f24d73f4db2110a608a7f22ff3

          SHA512

          a59a9ea794786ebac2567de19efd39acc7fffb64d76407068ccedbd1862c12d94618d08456ee5972689a7dad31320247f350de90243e0db03f10941b009289c8