Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29/04/2024, 12:31

General

  • Target

    07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    07ac6e39fdb3e77af374dcb477b1a58d

  • SHA1

    d54e3d8e2ef315a47efc1efabf5ebb2f3fdcbefb

  • SHA256

    2b60a680b373dc3191cec5f4827223a3372b46a7de4ce2e83ad3a080c947d379

  • SHA512

    c55a8611023f757cd8cab6b11f6651ad9a53042a2c2f646506bf0c4a67d415c363dd9ae9c8745ef639f7726c1d0a5779bea0b51b13c504273b76651a3cb3385f

  • SSDEEP

    192:WJNmPXMC7QxBqcYva4AJate+8YtOp3qE6asjIbZ9p5L5Zf/voShknLeHj+X93aXE:WLIaIc083qE6fMLvATgyX93RX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7ac6a8fa702401b6bf4f0caa6270b394

    SHA1

    83c9d3cb8f3af82c0bdce5e10b48e30b7a2c7f39

    SHA256

    1dabd8dee509be3c4cbd9a9e40d6ef5c216859427383bd63fa0cf1ab9c781131

    SHA512

    fe4f18f0c7839bd717e2a32fc4b144ee906a4fe33a6fc2a6788fba184e0a84e12c9d91b5c46f3c741bcfe486af0eb3dd2e0add674f1485b96b5d2ea2d0a8fea2