Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 10:12

General

  • Target

    02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    02e75545beafa00b383acb331f1982c2

  • SHA1

    681721c2369da7a275a127bf23f83cbe23a31779

  • SHA256

    178883d6c2b1388da9d9304dacd436e8db3b9961732c67129386fa358c50de92

  • SHA512

    de7dfb9263e481f20e78bef84afb86cf2be6959553d77244c094f9fdb3d231ceac9957e057847e17f673214944ee595c143b49b7e7286201f9c01285c6064f88

  • SSDEEP

    1536:xIkg7sIXk6t9TVX/vsQ95fS05vIWHpOvTWP1d3HVqGt5+:Kkg7s/yOAlSOvwv83HVqG6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e5653d213291f675db9e4be4ff701b26

    SHA1

    545c98006e61bf43962e4d485bb1b650bf617eff

    SHA256

    55ca8e71b737158e92e47361c38bccc148e30ba4c6607ebb06bcd85a5380174f

    SHA512

    6df0fa8ce65399ba88afc0adb8810630503b90922a52d5e6a9edbbef599898bfd457e307bac21f67a35ffa0d1d04776faa5f0b9a1ed40cdc9f28b8ea8404d090