Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 08:29

General

  • Target

    1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    1a9aee388732efcbaf8a097fad9d717c

  • SHA1

    b8601df63e62795c29110c594dac157ce04e7e46

  • SHA256

    83fc9f643d5a3dd90506006292ab174eecec249700f3e51de6dd70a1bca87304

  • SHA512

    e401b768614e675911a497ee11f2552fa7c9838555383a0b99be2ed3e896cd65191fb712a86986a413bba7e8af86249e08f218f3ddfb8930f2455143753e96d6

  • SSDEEP

    768:3gGzpDMppVeqpU6n/Z5h1s0wNE8oWKiMQTrhSwo3Khadkut8sEBg4FTktzx0mLGo:QGFwppjinhpyXf4FTA9nubn3cu+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4aef5f78de0b81f7d3a097365979ee81

    SHA1

    d2fe7a794d303f2cdface61bf4aaa14a828e252c

    SHA256

    71291719941c66583645bacfafc1a3b1669577794a4810f28d36b3f80f6a1a30

    SHA512

    b6cd6836f8663ab89b0182ef6716d9202295588c515a2259a66827a718bc6685a3bf53fabb005e264ec60b9d9cdbbd99282d8d231e8a57965e631ec75bddf0f3