Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 22:27

General

  • Target

    a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    a6e165cb89f7b0d4a235db5ec1258e8e

  • SHA1

    53265b2aae163397d838eb8fc252d62628f386b0

  • SHA256

    f90c711df41ff0dd4dd247d115c5136e9467ea3763b92f78f9a1569ba5126d33

  • SHA512

    521cb16066062c5f7066bd5bf1b651284de43a20b20c9a4cdf348bf14d134129c0f23ade926ca870d07a0152434dde1e4f2e802e3d9eef178eee7816585d5a40

  • SSDEEP

    768:3XuMZmwgCLWaraE5Hpueuj27rrNCo8JmDdZuc8y5okwkOkoq:3XFZmGWS78euj279CtZs5okwpkoq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6e165cb89f7b0d4a235db5ec1258e8e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c144d38ef3742b6f0c5e840858e80c89

    SHA1

    ddbe05afc73ee2e1cbf6ba663967b204a11f130f

    SHA256

    8b48a5814ba7fbac468b02c47472acf6edafbabd2053a7c016f650aa27549d8e

    SHA512

    07b180a397639b5c0862c1def8d3571e26deee4130e2d8fec00a424ba116cc57e3c208441dcd3f8b37fa22d8b06d58cd2e020de78b9d346ae1de98a32d176071