Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 03:21

General

  • Target

    6d2ca88e57891c067a6ed802825c9cbd_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    6d2ca88e57891c067a6ed802825c9cbd

  • SHA1

    1b0ae19dfceeef8278983729e11d6dbb94d6f112

  • SHA256

    23f7cced3a6256577f5f79c6f4609042b2e72848b16c6186ccd0290a31b79882

  • SHA512

    b36b0db634b92f3af1937e85fdad864deb2fa1684b653d51e5422b4b6fbb4a252c799621b971b5f37626f6c2ed9b97e9fb6e771438a4f8610408f4b873bee258

  • SSDEEP

    768:4gGzpDEp662FobCDfubA08GFPk2/YZ48YBqSbFMKPJnQWavf+WzFqNGyTBKt8:VGFopL/YZwBqg+QJnQWY30NGyTBKt8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6d2ca88e57891c067a6ed802825c9cbd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ea638a158f1891ff529c879f844837f4

          SHA1

          e5dc22123ba5230864bd2b4509a60cb8623f47d1

          SHA256

          da17bf881bdab6466da7e8959fc780b9d2e6e04282b553a09c7e72921713a2f2

          SHA512

          37ae55fee862e32fcac3ce95c4427ff344f4e50fd3d044a7100339df82e0ebc77cd8e7f374455bf6956625061e26aa64abce17c9080a04878c72b8b06155a933