Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:44

General

  • Target

    6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    6909cc30b586821b7bc89f232fcc250e

  • SHA1

    e068855c9f79b443ae35b9761e8ea182ca43af27

  • SHA256

    cfa57f8c7e5cfff282dc39e6ec7efe3308b1c434e4923cd448a51554b8a6218a

  • SHA512

    b3e0fe2ca324b53d29fe39dc6cf2777fae43e2221a34ae17e389bea5ab4358412a2765902d7d2030c10c2d9917becf5dcbe51c374f2f315d2585c61db5c343f1

  • SSDEEP

    768:3GgGzpDIevKazPah1S/ZxlaLiz1CCLM+bJ8YUaTypg7n8p:3TGFseu21TLM0J8akgQp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9bcd9be9b4a375153bd72d6d9a56eee7

    SHA1

    e3ded31340563924d815f7bd4ddd82d0f8b622b4

    SHA256

    febab1768b065563d096ff7b81c29fb2872a357f6978af3ab7d7ac0edb03b0b4

    SHA512

    39ee0d0986e8af693feffc3b1793cde943194d4b565044f84dfb3c380c33e749bd081fa0bf4b858400f93a9c6c6fd5b4b55f6142d513ad4982ce33520ff2cea4