Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 07:09

General

  • Target

    6db333d7ee01e3740f4a46be29b405ee_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    6db333d7ee01e3740f4a46be29b405ee

  • SHA1

    41973daff75f7e08f4144abe3c60f2b016f3833d

  • SHA256

    574ebdfccfc53e62730e2edf537782a017918fde3ba60a45b95bdd9c87978abb

  • SHA512

    ddeef4f34cbb3beee1376df90751ba54faf89faea934e0502cc688a0ce5f16fc0a39673345e1684a2b5200a4ba3be5c1d0cada5c82ca6fe34000e71fa34d2a60

  • SSDEEP

    768:FUKlTtN/kwb2Wyx41TcYissoeJJiExVcgOrnT8//lilnI1Phf9sBRRXuPWHkAyb4:FUKN3kG2Vu1Y06JiExVcgWnT8//lilnh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6db333d7ee01e3740f4a46be29b405ee_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7c7cb3af5167ba916edabf22bc4dc624

          SHA1

          911f518cd62dfe4669cb07b50df29525f8ba457a

          SHA256

          eb56983a22c255955a3b48110342b90fc8114e314da1a990cddd58ab12bd5286

          SHA512

          61301bdcbcf2b8d2646771164299d0ffc886cf7dbb3ef849c8ae0e5f15cddabb639a801e9c1d20e09870830697c928ebd8397f3041dbb3315efe9114766cd132