Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 11:38

General

  • Target

    04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    04b3258fcb4b522d05bbdb7299f7bbc9

  • SHA1

    cd02214ce5edd859ab677f72a4f4a00835d2f9a2

  • SHA256

    39cdc2544ddc549e7c3a7c42f6448eb30d6d239b3518ba7ad463134a8dae2483

  • SHA512

    648093bd64a06fce5c062dc9b2df5c223db83c9b77bc844b4dcf2eead53757e9a3fce7e309e33d5c8d6a0374790de842e816e64a9bf9eecc57031f300ad94b53

  • SSDEEP

    1536:/20UpBwZRwVGq7bJPSb73l0qkJWC2WR6D4p+WspORSBq9ZnV:pUpB3kq743l0qkiD4pRRS0z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2792

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          27515233146ee294b1cc123e6a40463b

          SHA1

          2a7bb906b6f95904d14d1a6584ca6067532c8fac

          SHA256

          4412906478f1204404696d627d8d4e7b858bc6aa035fa1c4b35e818aab3079c8

          SHA512

          7f675f8f975a5631b12942be9d13fccaf795eba2929e511eecb4764ac418ca85b7a865cfce075acac794e580b2d208fbdc8a755d913bd27ed279071ab21d9de7