Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 23:17

General

  • Target

    5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf

  • Size

    50KB

  • MD5

    5bfdc3e30881f8dd6d965fb6529d6c6e

  • SHA1

    37aee3bea4236cffd2ab1f0785522cd368f50176

  • SHA256

    ab08c8a637af91f6cf9e2429229fcc8c2d446abeab26698dae21f6ae0c707ee6

  • SHA512

    17944a54c16dc86569917d0e116dc668a93fd6a955c402fc66bda801371267316e2851d0a763d1b0c0076b97ef57c1d50497ad6da32b6304b053bd0f083d3cae

  • SSDEEP

    1536:bGFoL/ZFC/z+xLtG9mXcVx64sUIY9gDiLZ:6Fo67+x8IMv649ZmDa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c69aa437ca49d170914622424c9a440f

          SHA1

          7fe569d846d4fe4d1b2245d305a920ca4d88b8f9

          SHA256

          aac5fe2ffcc937286402b43b60110d372550b5b652d95d279da82f0ece17ce3e

          SHA512

          1203db76be7bc738474a2d9adf9e95c4e10f303365e9d7d4c722db1e3a8e2e0b7172c51c344dcc4b4cb329d643d73bb7cccd19b24121700a8c56d7f3542d37eb