Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 21:20

General

  • Target

    a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf

  • Size

    53KB

  • MD5

    a69e09624e1601afb4ad8289e8cff615

  • SHA1

    2441936e300476a0e6f7b0106ad4dcce7bcf5e1b

  • SHA256

    bc30f26f7eec3fa7f70bb265299243ff1444863ada77617365d23cad98003c13

  • SHA512

    cc6d20031e114e1db04f075b74b4799adffcb8b4b746bc94cd8e4dfb34fdffc18ee183acec429c30e44fcf843e02c0158812731de522275c91bbdd5bbea136fc

  • SSDEEP

    768:mgGzpDyBVksi8sSd4pRFnPZfHF10R5qfAtbAnMtWoG08upc6JSH0W3A3ZUXWmOjS:zGFmOfSb3tWSNnSmuWmOjn8GTy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8243e4bbe2932296c16da7ca5e9004f9

    SHA1

    d5ba44ff20f561ea3feb5225bf9f98d26264adfe

    SHA256

    9dbedf704c65dfb10a0c7cdae25b85920cb09c0e8e83453b6dd4e8ebe858aea1

    SHA512

    2444d0788a9d3625d630f852c256f15e0427920443e8537d3849d15d3bd50c569077a21524f96d7437f8d9e8665820b690e016f1c8a2e163ed57456d190089ac