Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 09:39

General

  • Target

    0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    0255688e4c2a188445c14d699a6a99ce

  • SHA1

    88bcdd12f9d67f3a94b5d3204fbcfd01c7ace500

  • SHA256

    5ead45619272372a0719b8cc6786d371e9410035204ad6941c51b6616c113d34

  • SHA512

    caf006328b56e02d455352a8718b512de51299257cb6bcdcb3d5540379fa15fd13e2a59a33cc4820e28ff7de41bbaba0e5501f082c81cc2d6fc6b2eb6645355b

  • SSDEEP

    1536:VTcf6wAWfBO678+RQFh+6nIx3nCwzpV+KWOpOwrKWArLLpG5hUI:w6M86tEA6IhpV+/wr7p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    961567f7026cc53ca07de1a7885092e0

    SHA1

    c666d31544ff0d8ead53bf3573099354a37cb817

    SHA256

    00a0e1095b94ca37fcb01987e44b1088d84f20b9a87c8500072f1b19575931e3

    SHA512

    4f3e1c155f062787754c015e738c4436c8b29d063ef50060240dd688dc0212ce082d0d4f78721f5bdd2fd414eae575ac568acba593be2a4f04980410990f2fb2