Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 13:31

General

  • Target

    07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf

  • Size

    374KB

  • MD5

    07c7b83eba3d2bdb6e8989b5c7d0ee27

  • SHA1

    60a3d51840522f4a3765093828b76bd0e6a0ab68

  • SHA256

    68e0d0543c8917ade15d51976c6f533d8a7bdda53677f88590a97ef0bdd1e4fd

  • SHA512

    01c6b9fc15100a1322250097aeb5c32066edb7e0e7b1f8b79847fdca3915fbc2f5632d9428be10bb37cba7b53907632c6e212f6ac7234458f3c068571f255f7d

  • SSDEEP

    6144:UossTbP0Mij9gLELycBaddRFGUgobvq/z0Ajgg/ws8h7aQRoLF7y2zHgL09sCJY:nssvP07SHGU3O/zljn8hOFmgALHj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    038ad39ac84de0f0141fbed1cd6e4e3d

    SHA1

    5876f7bcbd605a52bab19dac633c3c14d24550cc

    SHA256

    4aadde60525213a09716db69cb99ea5c3b4795102b350ced8f7f2ae6e5bf063e

    SHA512

    cdd5c11a3f787c4a8749124679191da2935be4698b81c11ceb3f4408aece4c14e22981d9f829486980064773d06bdbe958166cb4ba8f7a07e325c98ff295ae11