Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 12:34

General

  • Target

    05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    05b9ac27ca57530367a00fe2f45b6ae2

  • SHA1

    4ddf9728a2a1af2ffdf2bf97a6f5a1817588c89f

  • SHA256

    c07b3cf3a391a60b7aec696e3209e936c16872e8de77995cde5a7200b258063d

  • SHA512

    e86033e7eca278e952f1242919e6d29924530cf5a2ad1769902f6d269817d414e81a0ff986609c97492a0ced212e3e4f32b0a5939a5d0e3ee8c3631954443d63

  • SSDEEP

    1536:g7jfkPnywUuLmGRYR6GEHHvEbLzhCcaAKr68KOW9AsPgBuJEWxApOGYmw9:0YPn/LJCIG+mLzhWpFKPnJF3GY3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fba2bac7abf44d14239c609a09b0e6b8

    SHA1

    6456fcf52193d9d05972aff407ebf83131a73ccb

    SHA256

    4fd973a6652a10a0a6045a9d3e4cec745a9322005de89d6563cd7768c028286b

    SHA512

    c216e445756be8d04ceea3e7d337680fcf7ab9fb18b8c59330da7ded683d4047dac03145b2b99be387913b0f12924f3c47c5c3ce0294214e0f11d6122915cee2