Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 20:56

General

  • Target

    0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    0fc391bc7848ff371beeb93b2d1989d1

  • SHA1

    87e1fb851cd715154132133f1de2ab2f200049a5

  • SHA256

    8f601230518718afff5c57942681b139e2d00a9663ac24d0d56979df7656c4a0

  • SHA512

    fb795e94e13b599fff7b1cc03b7b08b63e85c4a31c50eafaa8bf0aa53ba19a0c91f95824dc5d1d7d96bf89ae0c24c9384a35b9e4079fbf468204cab5bc510c6a

  • SSDEEP

    1536:0Ji6K0QYUikSp2v2x8O2BnLEkh5Kn9SkPDA0w1vWapOtQHWQW17iyuk4Jq7QmDO:I/Q6k0Ws12l4kh5KwkPDA0qAtQY17iDn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          847d3f10adb539ef9a286d6e59b3d782

          SHA1

          7ff13f579723c9190c82f0dcaa28423cf0ff5a0f

          SHA256

          3e3b29f8eaf13a94a14735a8e869f79c78282139df0f06d6ce2c5c7108347852

          SHA512

          568a0d05252c315bce3ccd68011bbfeb33160a90346267c9086649562dd2459c97cc11d549add52d60c2a18a787504c7104ed6871b451badfa048b06234ac2e1