Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 02:48

General

  • Target

    7b6d2a57b5fc19fa828af94bb3f2144c_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    7b6d2a57b5fc19fa828af94bb3f2144c

  • SHA1

    0e0278ae2f8c936dc41a0ee0bc2430b9e3482372

  • SHA256

    3f7679eeabf3d32ada8284557dfb60d66cb2f8f99996594b1612280127c3c914

  • SHA512

    56a82e71b10ad932a38cc3171ab97033dcc9aacbf481b1797737fd2429c3a9f1ff5d9c049b1eeb0eab3580491d45af4c1f49ab0dbced9b6396c003e0fad8b61a

  • SSDEEP

    1536:xXFZmGWSJ8Te/zhCXZAUpq8MJa4ihsQl+LtQ5QM:hysJP0HX0L+/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b6d2a57b5fc19fa828af94bb3f2144c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9b5d3144ad76c7aa75b8497167bd2fdb

    SHA1

    4700db39421f20891c5d00475106bc21d2cb59c5

    SHA256

    4cbb4d05dfca7fcc140395dcd25894fcdfc017fb5c3d70874d199308fce3305c

    SHA512

    b38e6092e428b578cdcf6269ac687247f88efe3bd026ccb63142527f9b1cd93ec770ce9c18d38a0ab4e0443cc80009e7f965505879797332c945d965b50c2fb4