Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 11:22

General

  • Target

    045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    045a7bd6c8e05737f8ac40e23eab16e0

  • SHA1

    dfc6a7cdc7cde9e42bc1dff1c2813f0e065e0336

  • SHA256

    4c43befbdc7de455839f3994e948c5c378ee1f97fb66ad6f15e502dfd749379e

  • SHA512

    04617f285244fd34a57ff377c295bbd7ae5c23f6a01ae24083df58e0d47f8da2f9bebb3b7feef18a467d66f5c51b552539de97b1fbf9c6af06194d89c4fedd91

  • SSDEEP

    1536:Pygn7utzGODiXFQ/pbHOn70h33NW+EhVtsf93RQJ/31afWAnW16U0ZddpNPuWQpw:agnStSODiXFQuYt9WXVtsfM30Rblvd7T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4befc1a0df38400428f7e5f7c0017418

    SHA1

    f1c65d68959612a85f5827ea21951e536016eec9

    SHA256

    d3d8b474ce1fbe6efd5ab15105c286994cdc5e81a270230043e077883cb1740b

    SHA512

    0d0c4aac5ea190b81501a8198cae836f51c6f88d4e6254a93d660f1e876b232b693d73757bde853a19d63c663aae2b6f10f458502e255782b01eb9613c6f0e7b