Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    14-05-2024 21:11

General

  • Target

    43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    43174db3b1776f7b4bdb531d569d6996

  • SHA1

    dd8228c03de158637cbca327d027b7c1ee2a80e7

  • SHA256

    abfe5f2287673a5b173201e947c4fb8bdc9c81ceaa991ba823d39e6498a1c17a

  • SHA512

    96b102554222f02eab41c011a3245066128a052cd7ee06f6fa577e15b0e1c7ebd2cba88fb7700d83c66f3a0857d41384d979fc7e6334deae38980b69c9389af6

  • SSDEEP

    768:xgGzpDc1J+kR7ld0QN+EX1sctaT0TCIsloZ4UCnFVMfr8Tll:CGFY9P4kWGDQMfr8Tll

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7058d3c15b4f83b7dfb27a490daef1d3

    SHA1

    73d2b49c307e87638d01021a6dacad2bbeeb5c69

    SHA256

    aec325a12da2f6b9620596c2756956e4f694dc76e014607b4c4470abb3aad7ca

    SHA512

    90247a3d5a004d215686d9c187acb386e5a3940e1574b5b4b98aa4f6e246c79c35ed86aa45b6cb27b68fc62aebe7f7de65dce80b2c2056ab3a0c825c109d5474