Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2024 10:57

General

  • Target

    f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    f59cd785d6bb01abfaf26fb27733a52c

  • SHA1

    5b9c68448de7cb669f76f978145193a2bb94ac9d

  • SHA256

    c9c2940cd2966ff7b222e333f54ef984bc8023124c61eb8d517f2a16afedd36b

  • SHA512

    ac8b0e3335dbbeb337c4d6e2498087abc2ae0849151712fd93487005f5e845baeb5ea90b04d9a27d0428e7e25901bdc6ab62a011f076a826f90c73c1f2eff978

  • SSDEEP

    1536:lNjDpkhd9bY31kgCxemi2LdQdnkfcW9GXh4AYHGa9irS4rz1WSPiOuY2DWapOtQg:fjDpkhSygCUSLdOnQcnRTre4rzh3AstB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    23a924aebca7f87cc86abbae95c84317

    SHA1

    99c83757df33653654cbb35c97af2ff35bab882e

    SHA256

    49325c9b32b67ed89f10fb2f59bb2d838b6f42dbdc73978955b66b4a17260c43

    SHA512

    eb4a0334997cce6eee7cb51290eac72561fd631fe1ae78b812469c790a80a1dbebc9701bb640b60d08af9488501ac41ae44c6e0dab3fed8c6bbd3c72c3e5719c