Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 21:51

General

  • Target

    17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    17a8f8c59fecc3713adc9cb9f4605ea8

  • SHA1

    9b251acbdc29a8e471da6ed5cf16de619f3b233d

  • SHA256

    4f438d965d753f64dcd6891d952c64f3767e74289adc09e8b4060d0bc337f79a

  • SHA512

    c806d4c4dd8e44ab15e4083d80d028c2bb793e17a994b171eed1fedd4414190d50142ffedbaec3dfebaa21103afd0dba1cc7086ad1f8791339566446d7600715

  • SSDEEP

    1536:FyhH20H2pJEnrsLetHZ2foLo7XwzXqkLWGpOKCWvvVBteznEZt4:8nHtHcfoLo7XwzNMKTBY4o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bbdee2167f569a6847f5d2203302cba7

          SHA1

          5d4f2ecb5ad5a501045cb5943f89f626c7e367e4

          SHA256

          6eb3b6710214eb1ce3daefd386faaceef00406f12cd9b058d3164e9c1f8f0500

          SHA512

          08807b74e9a995424c139454ec6e9e1cca5b2a9055961602b147b6ba3bf5212b63c1fe13e7b3d328d8c415751a61def04c9ba2b83c259af9edee05a125494b57