Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 04:54

General

  • Target

    dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf

  • Size

    55KB

  • MD5

    dbc01170ff57c65ef252f934ec0d8df8

  • SHA1

    e367d16b62a4fd447d7048e8fdb3abe8173f9423

  • SHA256

    1eb8a377b90fd490b67864c0f2a22464546fe57c8b9f0534f32fa0f3997875cd

  • SHA512

    5954976c3700661e7fe5c07f8cff5fb6d5a2a881110747c00f85cfcb558e3e03708d4f05a372f39b42a4084ba865407d12ed6d0d2ee4231313b29d0a678ff213

  • SSDEEP

    768:T0f5wyFpSXVDd9yXLbX0DR3wYw3N2ekEUwsl292HO8x6e0esYe6AxWNMtdeCh:T0xsHUbbXdnd2oUY+nL5e6AfdL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b350a44d8b757b7c3cb4f01b1cb46bf9

          SHA1

          a054d5d15836981962ab5e6f4e52454d4b1e4955

          SHA256

          76c5b9d2bb0e19bd5f9fd92f8048ddb23a9d077d79cf41b5f1a34837b92bddd9

          SHA512

          24c157622172eda67456706f3e0865cd5706ce784226c74b4ba32d99a0b4c419dfa8e8fbe1e89f174455276040762d7d00f4471aee0dd585e101ac7c66cc5c64