Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-07-2024 23:54

General

  • Target

    27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf

  • Size

    15KB

  • MD5

    27372c8088d10455b72860cadcb07fd1

  • SHA1

    5cadd6e291893449f44aa853e0a31e457abee9a4

  • SHA256

    bab8136dbe0d74c5ec75fb2778dcd6a02ba0296019bf8e99633e0bce3c48d76f

  • SHA512

    f25d3d119181cf0627684c1bac196a5edc5cf3f3256399a81a7f45fa81cbe3cb432ed4c328e2c97d9744683882713edcca92b1b378d0d6d64fcf49ebdec4745e

  • SSDEEP

    384:KP5uqkLaNlm+gTl/ozxEuJYk4EtWgwKT9sPp14x+skUm1uqdiLY/:Mm+g56xEuFIfKCPp142UyhdD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ef4b82dc9e9b582e56748eb61c0e60c5

    SHA1

    ad6924a4af55126534584404646d498e81785a93

    SHA256

    1eb1ff276bf3c2800261966f77c3740777d39b34675e9f38fa1b98432727dad1

    SHA512

    b1bef65f476f0d8d41c2fbb1819edbc4f06054ed3aa33a8147cdae17d585e05827e7990e390dcc6c3021253bd0303d7039fdbd9d90113ac572a055ce2a0635ee

  • memory/880-1-0x0000000002A90000-0x0000000002B06000-memory.dmp

    Filesize

    472KB