Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 02:34

General

  • Target

    b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf

  • Size

    54KB

  • MD5

    b15a311c7725f7da6037028ff1809f3d

  • SHA1

    b9768e2d6af046e1715befc31d33ab0b85433251

  • SHA256

    56f26a759994e48613ffb83c2fb838585dfb7c51204e596753c994d47b7cfdbd

  • SHA512

    09f5cd7bbd9e3d25875371fd27b3919c52884b7f75a4830941c629cfe90d7c39c9db280b0fbba2c0f466d5233c224175402dd1ea4125c8487befc1a6c0ee15fe

  • SSDEEP

    768:ITgGzpDc3IIXz7R90aPBQIzF9UzxtU+Z/+5QPm2X/USn6ffh3dhgiciiiiM/q1Ex:hGF436q+9+572sS6fjnC1WsoIEmw5jOQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ebc2ac179b8352b5bb1c5ad9883985f3

          SHA1

          0ae9f7f8d1eaa34e900d9acbaa0c57cf24585dc1

          SHA256

          f0e0e9681835d2db5c6d13662500c89fd4821e8043d1dca917f0e59b0a766284

          SHA512

          78daf945bb467c4535047923a6cb3f8d61eaf9ee8925619f68a4b42f563e7f8fa8cc743827a24e83e43669dc80b0b8f1a285de14eb50f8f9ef929185224d69fd