Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 16:38

General

  • Target

    98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf

  • Size

    818KB

  • MD5

    98a6495d3074f347ffa39174a805ac27

  • SHA1

    cd9179b494790078712ea6aae09c051f17fb3183

  • SHA256

    6d0612568ddbdd4b4e121b16ea3b087eec0d12fccd11a3223da38926d4c62cae

  • SHA512

    07c6c68def24a30aa8fe3f0967514321323333cdb3d3d290f285c2f47e5378210e08faddbfa62ef1574e99d6374627196d001befd715c7df2cbdfc554e575d89

  • SSDEEP

    12288:CAKRvvC6tjMWZ5JaaMrnDoPSJKXFWCzRM/uCYL6Nosc9h0KdNTuvGI4n8eKeKC75:CU7KVb6uiN+hH7dl8eBt2v0WJ3xVuFu8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3dc277658108b710195b224a02506824

          SHA1

          40a21a9c8dd91614d9eede966b93ac6b07cfd366

          SHA256

          988524681c3a4445cc9f28c29c85716956823ad8a4507878188597389596ae48

          SHA512

          5d4d90638114eddf71d29b849fdabdd184494d74483bd89bc0a02c86c9c6cc01c83f6a90c78e570419c804f9253ab873645aab1e6314f1636fd5766217ff68a8