Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:36

General

  • Target

    65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    65df8b83f5fce4ffde9bc351ba693e40

  • SHA1

    be10595d666401af5620c0686adf0d94c669b848

  • SHA256

    d3248beac29526b4f6b8a55b23fed975fcef889b590dc29fc5cef441be16cfb5

  • SHA512

    4194bac64e846b280c852355de53571a2bcb501f3bc7e9fad8ff0a53f5cab3a006e33167b7eef0c54119b0af33d32eac9774e5cf4810718414c441d30a2f3312

  • SSDEEP

    768:kgGzpDSa1EcOVgZzHNM6/rwF8CwbGcWaR5iffDvWOLG9DiZTJ7QAoziRuKMCj0Dx:RGF/13ifayDuiGpirQxzi4CADosdo+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d7b9d740ce9e3069eca120fde3779f04

    SHA1

    b71abfe876d02096e0d0390a6c2795cb0191d4ba

    SHA256

    e1a40f805b3ec2881839178df112fb25b258aabfc66a5cf9d0419840cda744fb

    SHA512

    7ac80c8a149ed12369b90a09e28629d4f6689ddddab52ead3a33e0c8f98553dd16f91d49d27b61069af3abd9bbc3502a6f88f78990d5876a648bf2fdf6e76b31