Analysis

  • max time kernel
    124s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 01:26

General

  • Target

    f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f6fdfe7b6e1d067d0d3240972507be19

  • SHA1

    b8f4a659c57c58687624dc44bcd79aa5ef6a38f0

  • SHA256

    fadda43741a13afb26ae1dba1f467aef0e9f0f17c0d5b9e5f51202fb5a85f5ce

  • SHA512

    2bd526a4ca1490c2c22ba873b2b61db313520280d47366c9c5756328a00615dc000a9576d14902c060ab7caecd1112f66363fd8fb903e8d6024f2bf5f2a9b44d

  • SSDEEP

    1536:V8y3TypiGJ8G2Jvu0gIbyR1tt+YU+aOC3iDvCzwoWSedWTAPonLslRCWUpO7mOu:pIJ8Dbw1tt+N+aOCyjX9PoyR97i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9da40da626b9935c311a4ffb71dedc95

          SHA1

          acf8e8e406a2308dae2533a258f6341e11068255

          SHA256

          64a09fafea1eb67dfb045651f050d7538ef71da603ce1ec9d6f7ac5ea84db12a

          SHA512

          70f6da727cb11f93a136fc54f0d36f8d2894bc360f0c929f2c6cb9c6b503a3358dc2f1cb90a312ea1300d611c83af01e27a212ff9e50b7af883cb913aa0faa7a