Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 01:38

General

  • Target

    ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf

  • Size

    364KB

  • MD5

    ac6fdeabbe3d32523b13e7286662c772

  • SHA1

    6168b12f4a9621a33a3f3fd042bc6eb54467576b

  • SHA256

    173ed3015f0e28faa86280c2960e98f5f8b4dd5ebe7a8625964221696e716ddc

  • SHA512

    f82fb4844fdde18608294870aa0eb3ad170f226668d2433ee67f9e5b12c87e1928484c5266c93d44505b4f0bd69f8cc3b9c6e48a02826f9dae959fd5bb709dd1

  • SSDEEP

    6144:qSKScvKUBxUxj2BPw5jLkryVS4L7KpVE11zUIvAQJrevrguVF4/y:qS3jUBIj2e5srb4V1eerRKp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac6fdeabbe3d32523b13e7286662c772_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          557b4f101e1e40a3f512c29d52f176a9

          SHA1

          a3ad6d14cc53836283a1589b3b3b16d6beeb13e9

          SHA256

          cda2c76ae613184e6b6eba3206b190f9854c6b50f35ab061ce8ce7a3e720bb98

          SHA512

          951b2df5b2bb64194a2d9bdf9328ba26033f3e405c225533f8536c8e6fc89f4c9bab0ba53f7e4abda8c75dd119a9ef064b489402969854475ab182adc6580f7c