Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 23:56

General

  • Target

    a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf

  • Size

    13KB

  • MD5

    a30851e29d5b1aa488d12d09b3cb376f

  • SHA1

    7c5d4a1613b77a1f8b1dfc6acc97e245c699e68d

  • SHA256

    db87b90fc37b8309b65973cf39e233cbd397b7da881cd146d87b7dba664aeda2

  • SHA512

    6badc024b3cc895350b2293cc838c8fb6ac4a2140608e3b13daa82e1574ba470a9be8a55e122b9427d9ca79c4e56b5a291291911ba584ef53e14653986d691ee

  • SSDEEP

    384:Vz1jD14pWHahB1KQod3+waSosytlqqdWc1J5q6A0iIKrYbQ/V67Ra:Vz1jupWHar13uOwaSVytlDdR1Jc10i5X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dce8d41059b53fe0f374d680c1405c76

          SHA1

          6fd7e67ab71dcd40d7b47931c75fad0d8c7229d5

          SHA256

          13e59a2a3b1d1ed413b0591792dfc69b0cdfc6de4723a37e50cc4751ef459766

          SHA512

          a9630c1bf0272c20baef67de303cbadcce4a6273482621256839da79b43a32bbb40aedf0037645bdedd7711a905c9530a271fcad59d9cdfa8ab94f88c745df08