Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 18:50

General

  • Target

    afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    afdcd650757b42e9f987c4d6b46e9925

  • SHA1

    d66574d6d4f9e8613dee33666f191e1e0dc73dbc

  • SHA256

    c6290d5505e1586987393907e10c24fefd8e6b406b941b09b945c62cc91ed386

  • SHA512

    d5375c96b42f9b2b603861d29fba3ab5c413b2b0c4adb93c0e4325870315657f1122ce6f749f3712d332a4acf5b5db45e5d53490314ac46c7b2d911c1435625d

  • SSDEEP

    768:QgGzpD/p9z41lOCkx9TozAZLSjAk75y9PylXEwR027cjbijXrNTGDK:9GFjp9L6DNlX5R0icjbijlGDK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    86a021a7c01783b7764363d0b487aa8e

    SHA1

    fdc0fa6e61e54d1de40eb1f28caf9cbf05f736a4

    SHA256

    69063122b6bec96e793ecb4fd120be5d1831031acb70f9d4393547062530b2d6

    SHA512

    0cf915947adc040ce6cf083635030fc069ab48c372ecb52b0ddf7f4c4aaad7315eff68406e9f80aeac6667b984a81b1cd6acd40c25cd1e668c6d3b7ca861d621