Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 06:57

General

  • Target

    2175abcc69fea29fceca60b01f9b1539_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    2175abcc69fea29fceca60b01f9b1539

  • SHA1

    ea3d7eefd87d28e23cc0ad32de2f3ff144a29ffa

  • SHA256

    42d3bedbbcc25ff0486e04c37b8e72004ec8e13679421bed93b744bb310a3aa1

  • SHA512

    ff6dafbd6a06ff36ad7b99f2aa7e4ab64b2f770b445bf660749e6088df6144a8a2a06c765ea4dc7267dd78f2eeb23db14cf73f902eeb6ed834f13c6c5c5b40dc

  • SSDEEP

    1536:6HixQ1yDqkwhlTa83v+Wjzvac/hJ0huvLsfV6zODr40IJZPh6q5:41xd932av3bPvLs9Eur4HPhL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2175abcc69fea29fceca60b01f9b1539_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    967a8f951cca75f4d0b720a1d21ab136

    SHA1

    0b57f9b3a22045a27b5772d1e24e24471e28c6cd

    SHA256

    6cf00f453145832497356cf6a0bb48ab0940bba79f0dec83a30dbd07afddc9a6

    SHA512

    7041e278213b86d5e3418b66db87d345f286f2e404fc029fd754dd2e7a7335cb45f57b0945fdb9b49e558bf2453beb2cf8cade6b67157efc5159094bc71d1721