Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 23:25

General

  • Target

    8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    8543eb906f0bb132384d8166e5b6169e

  • SHA1

    c143ba8e298c9a22cd7418c09f7fcdb523b58650

  • SHA256

    b94f9e81230029ce8f0f7b7cda32f67532cede101f28bbf0e303fe3b8c388e74

  • SHA512

    bb04e6527ce4659fc6a16c8ca23dfb3417c3f6d0341af6e1a1699d8a3f702cd9c1d9753dcfee278e9f23702ee59b4f668c01f0ed1d05d811ff6a473401732791

  • SSDEEP

    768:N0gGzpDyBVksi8jatt6P+J8Ks1JnxHk8di+BeWGW4xt27nJhs9rYKMvVpGWF0CyP:bGFmsFsBp3LJhs98bG+TyrAI6033

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          55706c0cea80e2a467454f0c06ca40a2

          SHA1

          8efe0b9c6923c5e7ef73ec8c0808cc7d69cc4813

          SHA256

          f1ab003c0dadb622fe01bbe8962fc41a16c671e1a30007c0be1805f389806a64

          SHA512

          e6c77f60461f02595a40acc1d217fff7f6cfdcac74aed1b63ff9017552f58429a0e8187babdeffc3e61d7e27075d33aec48977803454df36ee08a1f064c37748