Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 03:26

General

  • Target

    acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    acbc4bcc7d2f999302d3d6ac82d42f78

  • SHA1

    7fd201a79d40ea95f139b508a7a6ff2fb3273418

  • SHA256

    5670d7729255e5f07eedbffc45674576865e73e097795eed22de75150ed1e796

  • SHA512

    9d57bb3d9ba54fbde46f37e0172acdbce039aaebc67f50ca24ae598bc3f8985e1dc48c5ce0725733e656e5d28c13a8d8cb4f4fa6e474f98b8814c0618c2ec751

  • SSDEEP

    768:9gGzpDyBVksi865QGjUm9nerFwcM/7kowyChyfcXYw46VN2U4otvhQxIgpPZCGfq:+GFmy5Mpy9w7jft5QxZPZvf/i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5c5c46c7f3fc3e972aa43e1ac80b1364

    SHA1

    377aa5c5320209aba4bd0b7f31888f3a3836a342

    SHA256

    8a9f3973e0a5c2867fcd361d0594ad56252e64e8322d7b66b6e99b409e6be819

    SHA512

    1f447456705c0bcd31439e58928d099c2839bd9e66cb836f3fcf675c956659e2f4b14faff7881352bbf0dc2d36c37f205219e9406088ec762ebb0f45193c9f51