Analysis

  • max time kernel
    118s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 16:47

General

  • Target

    0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf

  • Size

    69KB

  • MD5

    0ae1324ea0b6753f3338231203d09e8d

  • SHA1

    219560269ad91787dd656f3d127bdd4e52303c64

  • SHA256

    c8025397639e72158e26c17153d8878557c0ac08384c9524dfb8037f53b32e48

  • SHA512

    87a5d09cc9cbed5718b4aa9ea4c15a50864e84d80bc7421ec6291fb2496706a8114a7b3844447385e31177b8217dde47a255314adddb05db5fe681bba4b4ea19

  • SSDEEP

    1536:U/F15CWz8ttFwWNSbn480eKyLTP3+OWOpOwrKWhpXbcdSjspd:xttFrNab0ILqjwr3pL3jy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4eff0f7c778b4a89558d103d0152d2eb

          SHA1

          f61a4d0b0f45c2de7c9134d42c2bc7116be6a388

          SHA256

          16d01d1dd15af72834b3df21a4cf28d7a51f9538141fcb511e1644bf7d8b773e

          SHA512

          13d48a05990f3db8deb2743a372a8b9c4933768c03e9b1660b72abd4176beae99aa709394e7f2a245e9956de62a9083cd152f8d59c57a03d1eb00d3f804bd5d3