Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19/06/2024, 17:31

General

  • Target

    bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf

  • Size

    95KB

  • MD5

    bd86147993145cd5f35d4a9b844e5e94

  • SHA1

    a36e394d32bb965cc45307d108da0479ba62e944

  • SHA256

    5780eef398356df99453b7b9f559e40fe7c48b34fa1a1ad35503fa45800def32

  • SHA512

    41184de9dd215492a81ad33fb18e00c394a52a030fd95592fa84992bce3d4db7a99f2534309cea00621febdeb921cb1666ff3ad8eaf949dffb8b427497f558ba

  • SSDEEP

    1536:oGFPH2AX3aOABe+K4oaABUFtvd177ikx8+BJw6ui4Hytu5RDQLUlByWwchc3b0vm:FFPH2zOArKgF17R3QFRUAlByWwc8bB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd86147993145cd5f35d4a9b844e5e94_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2576

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4b4ce74f1708d59dddca5caa12099c38

          SHA1

          5608ff0367c51822813d3714e908470767f00bbf

          SHA256

          95570d33bd9cd1f1131e18037e8745e1584694046ca250ec6e6f3fed4289a17a

          SHA512

          f420de53a762b05fcb323d6681e8fd91eb1cfcd2c3f481386441a3214fab514d0facc6ffe8bbed90f98a450f9bf4a91155d650f7a82fc2d69dd9e70be812b0c6