Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 23:27

General

  • Target

    12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    12b78dffb378b8ed69626d92975b2eac

  • SHA1

    56899726e7e6f122a4a6b54b80e00836e4f09040

  • SHA256

    c2e7f27132ac43e2351fabe9034fdd6135cf3668df904e10c34959415f507484

  • SHA512

    c84af30a3798371a96e654e98ca9c52c9a993804ff06c22bc8526e2d0b796ebfe0721fa385599d90058258d92e7677c40498ffa96c1a3c53864eb2d380dbf6d2

  • SSDEEP

    1536:8IoGiwubqR22crrl5AvWzN9PzBVte8f52DGDqQbWCpOViskij/JzlWNJvEFdOZe8:ToUx22ctFN9PzBre8f5KnViski7JzoJT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dcdeae5f4425968387499bc9a31a6863

          SHA1

          bd7f1c70fefdfe771ec0f63c236db4eb14904618

          SHA256

          d1111b5898e8f3929b551633921eba3028e00eb2a4701b4c995a4694c87aeaf1

          SHA512

          63402d51bcb20110aea9d4fe9e7038129419b0f720f1014e683c4e3ec1c287e58b89d72d3a275c0013d34196f195872507771401d89cf46f4f9a3b3e8f5347ea