Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 04:28

General

  • Target

    23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    23328991a39c05221d5dbd1abc989665

  • SHA1

    2a9c36ad472b32283b4a420064ea44e495db2b8c

  • SHA256

    a07a5824547b339b0b687d0829fa3c94b9532144b733c6b06fba05864eae3993

  • SHA512

    169c2d599a11e2416e453a3184959d858f8bb330781279f2ba159ae26be07d6cdc2ef2b4d2b4a93e746a4701c94610bc1ecb6c340d42bec2877671b40363b487

  • SSDEEP

    768:42XuMZmwgCLWaruE5Hpxo6mTXROThZdhZVwrDWZS2gwX+B1uRFMzPD08u+ex7HDF:VXFZmGWSvjo6mTXROThZdhZVwrDth8+I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2c377f07394dcf086c99c812bb719335

    SHA1

    44556fd152976e33b4edca75eb76a3baceab1c59

    SHA256

    ac2aafeae4ba6a374f01c7784d0f22175ecba5df417971c95d742ee6801ea981

    SHA512

    d9a8c704bb023d9710c602153b213f4c79092d946cfd089502c86ced050c425d8a65986f7a235fd4e78c9a9d0de3dc0d0243b192be75f927251bf78f58cebbca