Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 17:57

General

  • Target

    0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    0c4f6dd69b687b483f535855c3439a5d

  • SHA1

    1e346686fee916827d2af7f8dbe0db537f35c046

  • SHA256

    7f85e6acf8d84cf99364707523b9b135ffe9bdb6188fa3a8e19e5b1d638fabe3

  • SHA512

    562fbdab0ca326c11a94a49400c0dd31e38247012d1c7a6018ce63864a9fb6142bdb58af38577c32694ce7db9a40922f37f3c080e09064420470f0aeee5a3a85

  • SSDEEP

    1536:/2VROf5HU4/7Hw0TMywdT25Wd3143jmF+pfuWkNpOPaW6GP4bi09nifjKW:+VROfy67Q0TaTJ9a3jm4pfTPHP4N9niv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7f22a7b8b7fcb447ed02df8a286b4f6b

          SHA1

          91f03abf71c77129f7a4c35041a1e0621d9ebb4c

          SHA256

          a7e5ce2c8326d16d9180deb295a85f247e51df4082c7af8f5231f8c1b8b7bcaf

          SHA512

          da6549f44e473c3aa084ab3fca4e360ed8997805c9fca4c9d1166b0a81fa7bc6b2c018f4db00d5f2a4188a99e2fe054d4f5942649f0e5a2e83d5a6f00ed54c38