Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 07:13

General

  • Target

    1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    1fd8942ae0a2e7f87a9278d53a55f297

  • SHA1

    64c32c5d24dd64c518d1c9dfabd9ccfa9afdc929

  • SHA256

    0dfc74e263433324af3021f776afd191f84012bd91e751c8a1f974378f5247b6

  • SHA512

    11b2d0679a5d15085f4fce0b2e33b79e54bf53bd15a3166a9d2fc999205a6ae4aff3f7af7196219149785a3c6e426f0520da14d9350cbf8775209123d3460b82

  • SSDEEP

    1536:lN5vtWvXBnmH/eSVDz+1nTpgzVgxt2jLpw4kNyXDVMeSXFZmGWSxz:lN5FWPtY2KD61nht2j1w4kNyTVMeIysN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b28224a8291c2002544d64448127e04e

          SHA1

          6cfef063e26ddf595c138a12f904f0a034764d7c

          SHA256

          b2f43f23050fa1bb03a5da2fdb6e93d9d51cde061f2b000f6b36444700424ba9

          SHA512

          9b87649ac0fc9469797eb5f62ab58f6cd061dcc8c2efe8f7a31ee041b8be6b8e232c1eba06fbdd166458d3a6fbfc19c3143d14cd7dc1be9a4f2cea49229889df