Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 08:52

General

  • Target

    fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    fc61d1924f3d1da1754e2319edeaff25

  • SHA1

    70c622e5e07c22a9e5316e47a086aeb3b8e9acff

  • SHA256

    707b9a7f514b10de4ccba2a7f7b836fae319e1daf2699834934f6ae6482ed121

  • SHA512

    a9cbb627f8f2a69a701acbcd61a1849698afca5d0f0be62eada4bd92a66eb94cad9a8014b3e4a92f52ceee19bfdf07abcdaf974914ca8f329dbffe02a55eaa38

  • SSDEEP

    768:goA3xt2+x7GsJ1x3O/Kmm3ET3EJwe3E8CBfjLHSm3:go2tRx7d1x3pmxzEJ0JLHSm3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4927c9fd491f8870818434c09febbf43

    SHA1

    c686f0fc381580b6211a320022593e87603f9c96

    SHA256

    3fdd55b591452a96dd6a52d9c4b609855ea2daee5f2444856fdf179768b3ced2

    SHA512

    ccec7c73e527753851411df7d9f0aaa51da5015b8f8f4d1f92b72ed8fab56f0e88e777fd8ae78468e959fbf805540011efe2724b1feabd882bfdb7ab431a8a95