Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 01:56

General

  • Target

    b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    b13624baed02704f0d6877cdf75ca6b0

  • SHA1

    f0c0183e3eaa2e0ecb63d323895566bde6881b7a

  • SHA256

    0d6667604c26ecc2e7ed02a6793b32bd5bc4286065b60e783db3d49d40224ae3

  • SHA512

    91b7ed601f0cf9ebaa42971ff1dc4671782937578ec092ba10b98e8b0f57030358e3bf51235bd0dc16e8c7e35e618755885ba35af116e75bda336cb0cb989dc7

  • SSDEEP

    768:EXuMZmwgCLWarLE5Hpxl30YaIxJtXRUEmgz2ytsJQW8pvSCiEJi:EXFZmGWSEjl30YaIxJtXRUE4yts2W8p0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bc984c452dfa49bc19918b0212333f3c

          SHA1

          878eb59a42954933cef364af5351ccd2c70f1b4b

          SHA256

          660d859a5366467be669cbfd91308cd28a81d7148edd42674b69d0ac8dac6802

          SHA512

          19a9f3ac7871f9cb195d04adb44f69fc933882f5a4435eb952f54a81625d218c6deef276922377644a1572a5b11d116de67dbe68c12c192e65558ec2101fd649