Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 16:53

General

  • Target

    6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf

  • Size

    66KB

  • MD5

    6f30805bc3a0cc3c43210e0852cdfee2

  • SHA1

    d771107c0a8918aaea0433617e360258ba56243f

  • SHA256

    b29c4ccf6fd97a9b2d3f36586c2c8e54026d78b33c8582cbb2e3a3ba6ceb7480

  • SHA512

    4f0a68a33bce8a4730caeeae1385868b4d1cd8f6290463e8f8d88434d0b03a2ab53df4a0b00326e3e93cbbaabb4d79b743514099ebc6d53cf0d7fb6643daaafd

  • SSDEEP

    1536:IX2yOWk+ijAUCJl/YMKBJsvVBJ4nDaCdWanPdxTXOT:IX2yOWDaCnAMKBJsvx4D95PbT4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          76114308ec5d9d05a20aec1303ddb3ac

          SHA1

          6a8b20453d948d4e132483f4a350fd9eb63d20f4

          SHA256

          10b6f4e2b58264e404064017168fc04e0c228b2c0ffae5e6acedace9ef87cb32

          SHA512

          72f0d8aab03df5098a24feaec0d6a24e0067540fee8435dc6f722f39af06097f19ab0880acc9be1ed51cf65dad4bc03d2d80726202532469c24eb2f2d1f29484