Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 04:34

General

  • Target

    1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    1884184abe97b3457e8d1eab2542181b

  • SHA1

    0ee0f93550a614b355d391f8b6fc67ca22d80577

  • SHA256

    c9d8fc04be85e44e4ce64245273ab93e009950a8a3216a78d50f606c3e85e852

  • SHA512

    87bbec8a909200b5b95013a946f2a8ef317a91c817b8fe1fd67155039a43cce1a0c9a5f6c3a7a7904bcaae6be5df0de73fa1a17498d7deaf4a189fa608f95606

  • SSDEEP

    1536:npxU5cjbsZnGpxtPW6fIaTzJ/gk/mVIZW4Hwe2qGCifWGpOKOVb1RDvAWhw70fEx:pbbtxAGPp/moHwxEiAKOVLDvZw4fIoc1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2768

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0198fe7eccf35477fd09fdc23aed03e8

          SHA1

          d81596faf6c2a8616fe7de57e2487401207d5780

          SHA256

          3fbde340ffcf05d4c7f3be70978f9a0515ae681149ffcb0255b50ff07f6506d6

          SHA512

          a396e24bbe1cac211ba6cf6525ea6ef5b7be1ec3dc30c97a65b66d9730aaa8fc31bdf255986b08a9dbf1f7916ef1217c8f6c9384783b664f61691297eac213d5