Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 13:19

General

  • Target

    91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    91ed6c9ab03961fa07c35aae30f2f260

  • SHA1

    24803f5ee06657608784b015f1aafeb66d491194

  • SHA256

    7cfd0302edc0d361474292a908fe14dcb631db9d394b20ec9abf3ac873c70bb9

  • SHA512

    41bbe0963a0b69e4292694fb646116a8478b5301c16c45a5bd4fafd0a0a60f418c336daf0b6a642d761970fa259c4226b6a521cc60d564ceccdb4c949f3d2e62

  • SSDEEP

    768:aJiQGzPXour39XKx5VeXWYzS/sKwqz0is6ZIo2PBpFnDsu0RMEtN:EJGzPXR3cxfZY/yIo2PBpFDcRMEtN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b59c22b260d5c52387dc8663262eda1c

          SHA1

          bc430cf8bae1c538d7b5ea25ff23cf96d1e19ea4

          SHA256

          1572ba1271c1e8bdb505299fa813dca105f5ae5963833df19acd96f428c1c899

          SHA512

          bdfea3df5b2348b0859a5f770c6651b0e0958508f656ee06fa6acb78d8c1efb1592ff1c911fe6948c87f95ab745f2d3d87a039a12df525105550a4eea8ede6ef