Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16-06-2024 08:40

General

  • Target

    b29bcaf62bc5e535ebbc17afc7b90ffa_JaffaCakes118.pdf

  • Size

    27KB

  • MD5

    b29bcaf62bc5e535ebbc17afc7b90ffa

  • SHA1

    82f8c8312e1c429fb585534d685c27cc4a627439

  • SHA256

    d08c912abd6daca15d622d7828c9a69535a8eb2c8f95e012859041251a339881

  • SHA512

    e9397f908edcd371e494b8875c695c34111afd9c5036a3db9fe265d89c746a1ab6ab706994bd197f78d82437d19548e335de1a7e03a2fd358e373aa65ad298b8

  • SSDEEP

    768:1X2N/JOa79zf8lzTKjm1+4KU6uuBQELcIGKa94+7BW28O4r:1X2N/JOy9zf8T1+JnBlLc1Ka94+k04r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b29bcaf62bc5e535ebbc17afc7b90ffa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    baacbf657860ad4624f01831e369e71b

    SHA1

    9511d1316e52cb4b3ea81d3d649778a5b40a09e8

    SHA256

    392835f4ed52f3978aea85a60c9b28bdd00f832ccfa3f8130230052cd5eaae2d

    SHA512

    657532a1a675b0e9e199ab320767287ce662da58e54dfeba452efbc46a703e5ffec3ce069a2d4f1e46f341332cfbd467c7aa8489350a96cde5c6ff4b5161bb59