Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:44

General

  • Target

    690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    690924b74cbb5f1621946a198b9dd1fc

  • SHA1

    0ba80dade0dc5581975bdab0d71c44d62455b98e

  • SHA256

    08bd91bf9d838eb9877e6e2985cf742fd62e58cde5a6165e305a7d147335584f

  • SHA512

    6b2be2446c2454ee4b7098c12de082d835936c8fe5166086e69baa51922ef0a953414b6ce4132ead2b8045531b3c05c89d0e8eeae74f73be1fc923d2ef6580b4

  • SSDEEP

    768:dpihQHuXJ7dQDQCaFFg2RJfbX11/3LnyALe/HCUAn2cy5E5/XuMZmwgCLWar8cK:HApXJBQDQCaFFg2RJfbX11/3LyAqCUjj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0276e94c49178e1987e803e5658e52c3

    SHA1

    6a2920cdbcff60f6e36f43ac5bf33be39711637e

    SHA256

    0b4d0e6405e076d8183c593fc0e9e1b0bc5211af2218dd8574d6df3a3272df7f

    SHA512

    c89b4a5f66b70f77b4a67072408604f4b7dc80c09a1b4c4235bbae55e18acde36c275d8c6b95e345c58c1a28f1bdfec4af83e07c1eee24464f659b5f316ef402