Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 02:21

General

  • Target

    65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    65ab27c4fc953fda5495f9ccd8816373

  • SHA1

    48cf102dc6d5912bf028d9b74096bd8320020deb

  • SHA256

    a638359df129df8b1f97fee0f66b15781a984ecd836d27d3eb83ae94768cb7f2

  • SHA512

    afed323325da4417b620950c1157a59433b69f76b9592757256c655b58375c23b39742659de35d9d2ba45c93b7399615586e0989a0567afea923a4836c1018cb

  • SSDEEP

    768:IyP1cOXI9pWs0g2WAKT2X1YaVoVxiV1BPw5vtNykz7e/E5vXuMZmwgCLWar+znr:IyPO6eWs09WAU2X1YsoVxiV1BPgtsWCv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0267c361995eed8b35e1b7e244e00714

    SHA1

    d2eccf4bfc5448b04131a0389e8b4af19541ff83

    SHA256

    f68f705776da4204c6cde052fcc8d14dccc6582a97e19c252d9c9dcea653881e

    SHA512

    d83fe9d61737fc5d07392b40a689fea5f0b6fc96c66fd5d07a43985eda656be9b9d67462597813eda93f0fe30584960818fc7746dd4201277473e5be6676396a