Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 19:17

General

  • Target

    f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf

  • Size

    69KB

  • MD5

    f1baa5698b83a0e168c277f62b14ca79

  • SHA1

    f05e54de1ff2278ab059a36ec6c296e1a4f3f01a

  • SHA256

    5766183cbfb367d30faf18c7dff1a859a307abab6bddce32bba7cc462c5a7124

  • SHA512

    6360d5e75a23b23115bc40620421ac64a04026fc7ecb7583995b6dcaae9b9454b16193916186c0a585487f317cf68565bd8d6e37d9dce50bd5fde283b8ad625a

  • SSDEEP

    1536:HX2C1tgTWjpev7vyCjb/VRLSUVKSy2X2OSWWKn8QG+DWQpOCRq/AtmymmQ4:ZtgSj0v7vyu7TLSIFy2X2O0O/G+uCb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1808

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cd6d28bd356d796caf29bc486dd663c3

          SHA1

          d7c3fe5faa65c560c17e6a2b2a91f25123f1522f

          SHA256

          398989e2fa31c46dc61b07391565478ea8abcb014f5185aede1a6aeef1bbd1b7

          SHA512

          5564ffa1438af42a04059d00579af5035f31e5e905fdbc65a5f205a8553d1b63b960ed61377511067294d421458bf447013595c3932685d132e45665c8a2e2f1