Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 13:58

General

  • Target

    aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    aec15b83a4f0a856212f62b18e3b89db

  • SHA1

    64236e24ae6af2932319b284f0aa39d6b5c891b0

  • SHA256

    016790c235612a7db801ece715c3321ce618c6bbf268ce04a2d56ddd47fd6971

  • SHA512

    54289884289a40ff63816f95958fd682a7f6851ac33fad7587604df9112905f05834894e19c7a8e3ce403709f27607483e4c95665452db77506a36bbc1059717

  • SSDEEP

    1536:nXFZmGWSvvmcvk6dUqhOMA4p03PGBw5ot8d7NxegLLzkNz1MbTRUROTSqv2Fya1Q:XysvoqhZpVBmotweg3wV2a9AVFSY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8d0189130333d65abd8ae621020601ba

    SHA1

    74ae5e960b6f0ed64e9401645c50645125b259bc

    SHA256

    4b13a3750b361f00d33dfbd9d015995a8d57d21d4d63dedd98f30fa5deb305eb

    SHA512

    3f2bd3a3d10f344302670d85f5437f219fbc6d3b6e658c2ac0c1bcf3023f32e424d8f46e4be28058c9cac2f2493909fa6e99e5cf13a98a87bde37f5f882c3474