Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 08:26

General

  • Target

    01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    01567ffc513f390a2a3dcff459dc96a7

  • SHA1

    711ccce4734ab5e10a9254f90c51f80b434d841e

  • SHA256

    c880ecc8b72673beeb8f68d8315ec47d09e1570710d55e329009f3f0acb7553e

  • SHA512

    e07e53e69897d1c7c24db77ec7a762d4fddf5d8b13e9099a9e0294401fa7b991cdd934f93cb7bc073d5e6bb9c4bef435d4457419fcbca977e164fac321144c5b

  • SSDEEP

    1536:IT6NPexTPk4EcaTdo9MurPw+WRDWGpOKhI5bWesvpC6w:c6NmxzaLo9MgMuKhI5JsvpI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ffc243d0a672c1fbd08fb49587c95213

          SHA1

          bad920fcd77ca9a1653e3d6de49d3392e790e25f

          SHA256

          01f760bf6b1e4acfd88f063577dba951793bbaee8ce11519b4c2a8e2950c46d7

          SHA512

          401470ee2aa21d15ee456cfbdead029c12b0d2fc1fcfa2be55eeee327e43a5317f159f5a4ff8db6a5ce503fd0cf4c7172aece4d12fe0c57395c33e4c0e03810c