Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:13

General

  • Target

    10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    10215a89adfedc556de16d752b50b857

  • SHA1

    ad1a6fade1bdb95d7790a1a7ee7628e98dc6a34f

  • SHA256

    f2dd50e883034909a2912765bcad4b44e9d27fe5c095c07fbabf312661cdee04

  • SHA512

    389975796537a4a283f0400cea7af811e134376e7b78154d8d655b73dcb8e15f15667cfae92ef044cde24d38a6164611ef41fb245c2cd846b694a6be47acf92a

  • SSDEEP

    1536:3yZufbprx6/fJV8jFpyWBP2t5zq5qYWCpOViIW8c6Ksluw85vkXjWo:Muf+nuBetKGVisXKsHN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cc30ab95e107d9e4f454e76c248dc088

          SHA1

          bf7fffd6728c4c299d59cfdf6c2544e8631f7048

          SHA256

          4979b5e36233c61ab7c2983f7c99302c6126da5d90606347c92b23ab5b9231b1

          SHA512

          1e4d77bd6db6d7a357f993566b7e90e2fc52de2bcba72fcd9d77984b7a13197788ab806c5f7278c5a83a260348b091a64531df6cf4c28ac1cb05eafee59f8cb2