Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 12:32

General

  • Target

    fcc6cdf0806ad670696ed8a578cd3384_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    fcc6cdf0806ad670696ed8a578cd3384

  • SHA1

    0bcd11532827f0713e2ee287bcd88c5866f8702e

  • SHA256

    c5d5eac7f3c1cb240569bfdf9df0375a78b8151be002c6e80cc0d15ce02ee850

  • SHA512

    e765a741fdb66d36b819f21caa3efd84b3843eb600dd155f39e71234e99f64850b3062fd8f1d33df175fe8d71a678a92561a98b34f147b6d30e07489f5bb9056

  • SSDEEP

    1536:bNUuEtoiR/xxhiweJPNqFa/RACCHK8iUEUHly6hBsD49TKJbWRLUKZ5lC3DzAqWI:5UuOjPxhinqCCqtUEwb9KJgwqlCHAx7o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fcc6cdf0806ad670696ed8a578cd3384_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4e230d5861dfff468554cfb95279a530

          SHA1

          727664002af51db6e79a41fc35ceaf9ed06cd97b

          SHA256

          96e01d3fb796a038e1bd183046df88ab6ae81513e98df57768a993034b336e4e

          SHA512

          003f5c60d8a344c24eaf5a99ebbacad8728e10472be62a8c9203eb1d9ca41a0067c21afe37ebd88226a588185cdf063ba4df98d41b8b42f90b33f2d509c41bff