Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 08:21

General

  • Target

    669ed43302904db7001fb10816047e00_JaffaCakes118.pdf

  • Size

    360KB

  • MD5

    669ed43302904db7001fb10816047e00

  • SHA1

    f8de8be72ea47213332225a3bc6acbfb8cf2710f

  • SHA256

    3471a6aa482237f5f8e0113bee53b4ea4daddb35e4e05f8ebebbf8ed6a2f609b

  • SHA512

    a13167d5be17530f79b9364c0252c8fbc20fbd20a585760eb902b0c919b5f4564cb182ef2d1acc3f754aef69012347c63bc9dcd036b06c68fb796c349363fee2

  • SSDEEP

    6144:3N56GBeaJAYE+d6N9ui5pz2v3umaIDbwoPe8QkluF9zGwcLucZIy:3N56eG6muwzuVnDbwypQklIpOu4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\669ed43302904db7001fb10816047e00_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          39b59d31a08254d6eb72b76e5fbab4ee

          SHA1

          e63a98c09d9a96b4333a3cd3fd63da4c60a72624

          SHA256

          549372e1218ea5e75136cac3b0890bd7668a1ce006c2f6a54de34f388d86cbb9

          SHA512

          d921966805d6d4bbdf3c74d84faa2a8d97b552274aed5b940bb3bc5687870d2f971aeb2059e1a228471d8fabfde140821bd3302d5579fbe447880b03d4a48721