Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:27

General

  • Target

    a71a9c41b1de0f43de2f9207c7d0197a_JaffaCakes118.pdf

  • Size

    67KB

  • MD5

    a71a9c41b1de0f43de2f9207c7d0197a

  • SHA1

    42a0f89e9460546f4108131df0b3fe5c23c1ee3d

  • SHA256

    2cb5ba3f97e3a6adc4ae0bb59b897ef74d16357d099cb476b99d81048052f779

  • SHA512

    48bef2a43ebd142dbf2d93d6c1075f385f55722c0261e95197985f4232e30a335948344f8d5cce80b17b920ea87da264910ffa278acf6b7911be60644d3cb9da

  • SSDEEP

    1536:wGFQ4Tkwc18uMcsDeMLYHcgj2Xqlky6S9Qj:9FQ4kZ1wsX2XqlktSi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a71a9c41b1de0f43de2f9207c7d0197a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c40c066ad990b5cb9512ce907e568fe1

    SHA1

    288e98ed2f44e13aecb24b802d84c4b0d7021bc9

    SHA256

    f1234154afac95a394ab117429eebb590a1ee100f2d3f9ea21d4534c88c058a4

    SHA512

    0a23a3ef50b13ba3226e776064ca3d911517b3748e3ea0f4a0833c94bfc016fc8d191f250bdc082ef760cb0322c784e5bca82a47ac4c21f194a711427e14078d