Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 18:44

General

  • Target

    0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    0d3197a2c45afec7b56ff655a2a9efeb

  • SHA1

    ec8ceaf98db75ed4a064c582af67d5444bf77587

  • SHA256

    06d3afed49b91776ffbe8ad91c6d108fb16aa2a2ba593d7fe6f1d55b64047086

  • SHA512

    116bb7ac3481ffd7566b667d2d205576b88b81eff20ea41c430b127b7f99e9c3606d2c012a9714d3bd57204b057fae9763e6e70cce11ddb027c22a55ddab79f6

  • SSDEEP

    1536:vjABF73gzR/M+KKBwVgwrI2rC2n8Acvy6PHhmfA+te49fikJ1VzWx0vquoE6I/Zy:bEF73yR/M+KK6g8ne28AWvgfFtlexOb4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          755711e3a20a70f18687d6a7c670ee77

          SHA1

          b529dbfeeb2d91e0d48f517ce8d51c4c4b3f3520

          SHA256

          713ba0eec0cd57fadb93e1e8af3e200a950484fc94ecae1d4e171672884847d8

          SHA512

          168acbacc6b30194f550c4f9497435fe05e1a7884dcc4055eeee4a4271243bc644e369faa09eb249bdba151720a42aa44636697a3e35c2829dc9b4c1c0dcd95e