Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 16:06

General

  • Target

    097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    097e3df4495253e3dd6ece2cb01e6dab

  • SHA1

    e811a1c7cd5b8ecbc3ecbdc8bf60a4af6f67af8f

  • SHA256

    0212d8ba09197d81c5c1d1bd1b593a594a542dda4b4e0e23484348adaee2cd81

  • SHA512

    debedbbe4a9cfdc9f3fb98359ca1fc12f4f27c6f5159c502e8904feb75a551b00ef4d3a741acce8bfc3c67086e04200343fd5c28dc7ea03896e732085463c12b

  • SSDEEP

    768:sgGzpDfpUG+APW80/chTNLFRqQyn4zGy/5D8/n0UvpxTEclFX5vYIX:pGFLpJTBqHn41wn1phEcbJvYIX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\097e3df4495253e3dd6ece2cb01e6dab_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    59fe50703b5138693e5c56eee07b4d4c

    SHA1

    567cd31b920f91e20dfc4e634ac01422c1bdd0f8

    SHA256

    2558bf8258e6d3194db221911a868bab3a2e2810004b9bc1f08b7dafed6209c5

    SHA512

    4b42655231531e6d33b6e87ec74d1893b2c137d22690143b2ad13c12e5d497884ce32155f1eb26bb06ee69eb424881f2aebafc39b15f9cfc4bb5439978a22174