Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 13:45

General

  • Target

    0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf

  • Size

    64KB

  • MD5

    0713536c8b0e136efaa49c1802f69ffd

  • SHA1

    cdbb49b57a498414bb21bee91395d64eb938b8de

  • SHA256

    8f2c5342ac1940d821cb9be98ccb5e3e02b5e9ac27855942e09fd914f3cc1d81

  • SHA512

    701ec5112bcf8c518c78ec2753647351a20cc147b50466f4beefeeff33a76c1543bd03a430b7f5f113cac6958a4338f5a474b2c2c185f45c8e2890977390525d

  • SSDEEP

    1536:reOKShSXdeyq7qfA3wWqxPgjoAGwMPFWB8MuTWXpO//G:aBLdeHyAgnxPqoAAPFWyMI/e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    497929664681c16ecaa6e8fe5c22ad4b

    SHA1

    f621fe748af6f67353025241fa80f87881777564

    SHA256

    0c99069ebf9a1a2efc1630bfa072c52330f48822de7fdb6caa4835c8fbeeeccb

    SHA512

    ddc93483f78ccfffbcc97602fd7b7731918f03ec5b1d411aac813f2e086d5a10227fb7c4b9ccb4f653c6e2b28d78cd1a9541c4333a81d1ba582800a95fafebbb