Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 10:08

General

  • Target

    86a1c3cede48f396ac3db9728f14bb94_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    86a1c3cede48f396ac3db9728f14bb94

  • SHA1

    7ef30478f03e7a7f809aa74333ee6ed32aaa99f1

  • SHA256

    ab903bed843090bf6ec4df105dad8fb64d9dccf3b753d14d98f9e1a50c23a5e0

  • SHA512

    c9fc7fa1c649d2ade44d13feac8bd854845edbee56fd5dcafcb74af17d1383d357b842a628bafdc59778d9049ddf2be793af5bd24b960ad5b839d4cc03fd14e7

  • SSDEEP

    768:igGzpD34Q7MxwPkMueXdPfE3QKC1aKbXtmByJ9RWzlyql5SypxSCs5GScDbxbcpK:/GF7X1n9eyJKlyqd7Sl4Sc6hXGTXbX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86a1c3cede48f396ac3db9728f14bb94_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ffea6f02bb22bdea98e62a029f6eda85

          SHA1

          36d3048a8c3fe0ada0b7b3189910ba5f5d7d372c

          SHA256

          cc860ec74551cfdf485f97228c554cfd5fa9459106acc813cbac510ad3c2ab90

          SHA512

          4ddbae7b9e3720eedf267d44ed821d6944f4294c4e8c4a8009bb3177ba8d302bf0a00b4eb859cf5bf5b9e78a7897f9db7b2677527fd498814899338bd192ec09