Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:17

General

  • Target

    08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    08ff1eca14ffadf0766202bc34fd61f2

  • SHA1

    a977e86ee5f9756db34d98de2b6f0c5083db9c66

  • SHA256

    8872bbc62414efcad5da87195f05bb4c80e7ae148325f539ca5c1167c64a3f2b

  • SHA512

    0d7203986126b234fd2ecda8b5896c76d90c39ed06a0baf5b3c83507ee9a4d678fb730af25f68947a11b49c1aa31951cd3d4e35690e113b017ff5347d50de677

  • SSDEEP

    1536:1PZyaTnGLT4+4J7QdImRkxIKbgUHgJSv/eWspORGWSvwI8DcXMPBf:l/nGX4sRkxIwbHg2/xR0vF8J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b307bff919b29f2ff159a0b2572ec455

    SHA1

    3da541ace9af56b09adaa7eb08ee8a7a93366c41

    SHA256

    f72d5fa4b1c0ee49375a8796453fde52b852f5ccb32f2a732336f5ff894139af

    SHA512

    c8b061cdcbf251aa3d42fd9db7ecd21ab0377c89fa940b221616caa7fb1879ca8d7d5c8c2417bb515a0edd7abebba3988a18b993bf10459d33759633c8d63d4c