Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:41

General

  • Target

    10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf

  • Size

    96KB

  • MD5

    10c7134c6b44a1a2c0f86ef55baa3888

  • SHA1

    9f5775a81f06cfbec287b476917943ccc79c154f

  • SHA256

    1499c7b5fbbf309276117a988f1f88a6e9b7d33567529ad9ae28aaeabc4e6232

  • SHA512

    69aea35e6cc65b6426d6c04127b412a841abb0273d0c0ea9f2e30b9133be7394e70bb22c972ccccf2ac8238c85e9959960968926a2a039a678cbefa0c9e8cd95

  • SSDEEP

    3072:VL9VG65yXL0bL5mjZARqad/YMhPZax8vYoS48ZX:VL9Vzy78Lce4vH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    093a21f4d866c334961570dfb4b2abda

    SHA1

    82c0802bf61b274687e39db4aa51592b6e98d9b7

    SHA256

    6d0ce33e52219e177495084a6261fa5cf547efa2fb2f6b8d48032b41719b2daf

    SHA512

    5511d690011e5e97ac6323bc65b07b0497ae3b40e9b02e959d089dc7d0efa4006bb8fd7f4243ac1f042b0e576c8c92e0af6d4cca9d5ea058046cc4055d7c4372