Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 08:10

General

  • Target

    f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    f30fafac0308b6f70effe6862bbc3803

  • SHA1

    ba7ce89fe9c4011e73ab99384248751e4545a69c

  • SHA256

    5972ec56a972bc8c6b93f30b6d6596895c8f12630d2dd6d3644a0b532529e09a

  • SHA512

    0660482c2f4ac22326c9745e0747202afa08bf3f6038242aa14eeba917f6e8029bcccf87a67f8c3a85d060086eb7597f0165e41a9e7860b632dc995d6babe955

  • SSDEEP

    1536:Xl0NGpEVdo0/h7FFgb0CSN6PqXTwjka8NnQEwGP7qVe4W6pOu26WQdq0Ocr5o:VWFdoy1FFS0Cc6PWwQtJQrGzCeBu2ilc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9464956c0d6d9d6e42be017e2ed14a1a

          SHA1

          2612c9d289949d00744c2add33a8d76ee3824623

          SHA256

          1263e2e292b02713ae259bb0e74f4cb5cc8c65073e2f4551bc167300568a19a7

          SHA512

          3381749ccc731e92e8377930edaaa147dbd5932a9f35317e1ff6bac2c6a70fde7a8822ff825c75affa7e6eacc409bd13846afb432fc6211e18ab748f862eecd3