Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 09:22

General

  • Target

    b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    b2c3bcecae9f6c62aceeec2a8dc7552a

  • SHA1

    00eea758009eb2d0de98004057dbb3fe0d9d51cb

  • SHA256

    8d37108fd746c35955d98f7810a423513fe7276e092195a67798661a9c490c5e

  • SHA512

    e8b8f9759dd3ec60eeb0e265b83f0b23f1a0ce2d55ed8391a1256c86283b52ff000f19c388c851d1ecd292018f6a00162efdc91d2bc8ebf579452e2e9e066607

  • SSDEEP

    768:oVgGzpDyBVksi8CNh2jjvmWdsjh9BaAZQjbeUCvOrWkFVjJjuso8JSV6i01Lscew:DGFmAKjGd+VjJCJ8JSgiwLsceJ7G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b2c3bcecae9f6c62aceeec2a8dc7552a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          80365825739f7a91dce5e36d218634a9

          SHA1

          755d5535a78d3c9840beb06b0cee49f8d75c7614

          SHA256

          19b52e3ef1744c4dde02076e83c16fce550e88fb9e24649759cf2ee16749fbc8

          SHA512

          f6966082a1c618a3ef8c4190ec9c36f6aad1f524d936a26913eccedc18efbc9f199113cfed0a37c1198273f30b33bb1001b49579d423e53e8a137f0cf2f820b3