Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 19:07

General

  • Target

    fff7103c36750a012ef9a004aa39e712_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    fff7103c36750a012ef9a004aa39e712

  • SHA1

    b04d8aaffcfaca99acdd43b7e20b60f811efb6bc

  • SHA256

    2cb8812204eade6cc661ad26625e515862fc773443515ffda5c92df7b58308b8

  • SHA512

    1ae39115bf4a3332f3c728b3985e12649b5601260a87ff13b97c75954ce09aa6e0d267b9bb8eaff6e5dd1b4491c841e9789c13d62380dadea7898fe6211e0374

  • SSDEEP

    1536:s+F10JEV57iRsIybd4Lc/Przst/NTfUzJwDDIX32ITfCWapOtQJUgWlLHWUyPI9k:rFiJmssImddP8TfUzJL2SftQJ3WlLfyD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fff7103c36750a012ef9a004aa39e712_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f653a8b89f6ac8374c23d101c653fc92

    SHA1

    cb72469e948fb823a74a95a8a0fd573a8d663a09

    SHA256

    c2e27f3c616c121bb3f7908a963a368d80130d66ed8c9037445b4788306715f9

    SHA512

    126b650cb965aa1e4b2a5ddf24662056acdd4893ef8186de0a1d1c25ac56e83ddf965293acf264430905932f8beef7e6536f0ecaffd53ccad250a82d996c9da4