Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 07:46

General

  • Target

    00be275aadde2ba3b948532f832e89f7_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    00be275aadde2ba3b948532f832e89f7

  • SHA1

    32e106af660b8c41570098e35006c6e299447ea5

  • SHA256

    18a437199e8a84102686702b981562bdb93b8a3dc1fa0e1a9811942b425fca3c

  • SHA512

    9f4c3732c41c221f14aad5843c548c8aad8b24342bafacddaea123f47630c5673a63cff4db7440dff5170fe26f4d80b2f3b1acf4fbf403d01af6cb899971c495

  • SSDEEP

    1536:3DOkWpdUQJmv3erRDkGXHjwGDsrt9L8HjQM0tzWObTNymP0bh7n2BQW8pO+r9d:ikWDJA3e68whpSHjQM0zbTMk0p2B7+H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00be275aadde2ba3b948532f832e89f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          98385ff16580dd298b8180b858aa4514

          SHA1

          120cba758f4eca268b63edd9f20fad4023cb41fc

          SHA256

          7b75b730197e84412f52d10b03ce2c930c8d70153c9385e0fb4c0179e8684f7c

          SHA512

          76b8d159a7d1818d342e8bbe69a84085c4efa4525b0c59983c77d8daf29e933970cd7f048d379e6ab93b8464cba5e8ce9f56d7d28ef8f789a3ed80ab19c71506