Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 21:36

General

  • Target

    a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    a6ae69f6b6c355ed60e28944cf48cd38

  • SHA1

    1b1e117ca7b3dd91218e801edc339ae8db951815

  • SHA256

    fbe709f07bb07e2232ee7383989d7ad21c6dd03f40c25c71f774d0472a47e5a5

  • SHA512

    8847bb477cd785ec3b28a9c93d06be7badf0ec44a0203ba5dbea70e48c0e5f6da0746f090fc7bc059f3eb2d1676f852c7f3a2efb5863c84c040fefb14cf3b5da

  • SSDEEP

    768:agGzpDvpR231OUxfJDcHFl0oNPDAfNQODOTQKBmTJ6YrRg6q3HlMhsXQAE1:HGF7peDuFjSN+VHYdg6SWsXQAE1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          515657b3213c136d0550d3bb5afc8c90

          SHA1

          38dad9f58985a49c7e621d0aa251b79452f8cb48

          SHA256

          c40d356ef6192590c58b8a29295c9e81b9be3a7ec381c969240d97eba21ef574

          SHA512

          d06df3c82a580711ae68cd2fc2309c996e3668695f567d9f0cb82f422db93a87ac3e2fd64b78ec11677ebc0e2388c0b01e667ef4d16a25bcabce8c6c6305c34b