Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 02:57

General

  • Target

    e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    e90e35efc6a377d0f5f900adf4032d38

  • SHA1

    0d30592452f9b72a12930b9033b160d78824eb0c

  • SHA256

    fee01ea3b7c9013334f30287de3c14133f3ef1867bd1df789c1782cd7b64bb79

  • SHA512

    b24c492ec6d24812e3e10779c847893562b007a09577a67aebcbb5899d9150c3f953f7f7384404617397165d6b9c7cc1f25f5b3e64764a2aa07b3d3eed63281b

  • SSDEEP

    1536:UA7RYlcdvKmEMBDEZtJs0U/aR7fSFb3E5NQgf2BmHAyEVsF:dCCRzDknVRD+E5NQyImSk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3cff6b9bdcc25a5de3b9552c2e5658ae

          SHA1

          e38c5f2bc0b91dac4e6061cbbf14a38dd236fd30

          SHA256

          303b30f64f34995c6dbf7f3e29679a9bfcb3448a9b00b0a831abd333dabd0451

          SHA512

          46201d89d65ce1f84d7cab173fb092d847c0ebab478318453de0c150fc404befa27821cb6b0283f0fd56aca79d9a5bdc8ef568c4ad65362cbdd8f9a2b55eb1d5