Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 07:36

General

  • Target

    1c68e8413a9c19c52d1045050fa08a3f_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    1c68e8413a9c19c52d1045050fa08a3f

  • SHA1

    6356a73df7f003e5afcf2c7b87574d6258828180

  • SHA256

    6da830a824d3de81c28dc24b02c3ad32db6baa99bb3288fe405d3e7738bb0fb4

  • SHA512

    65ce5f6dc6dbcc2ac5e51c908a808929520b5704210970c1622964293fc570e92a85269d26f11754a380edcd75b09333f001731573a29f1655275117ab5d8229

  • SSDEEP

    1536:TCZIJuMLHPwzFxlBElz7rc/kA4E6Ne7V29kC26W1f2gMOMVFWUpO7v12:+ZI9Hoz5BMz7rccAZme7V29J2zfYNVow

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c68e8413a9c19c52d1045050fa08a3f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e16ddcc4f921bc26d0493b582a436323

          SHA1

          37a4c40a5b7b9197dc2b5dc4cc8bdc648c60dcff

          SHA256

          fb1bd723feec60a3d807b41fff1bd57f20072b04acca7fcdbd8f66d4e05da867

          SHA512

          d71c5aba3f6a2ffd930485f395d3974a9fb171f800645c59e455df9bffe4f5e5679d795f99f7036ee78f681f02f12b3e2dfa0b2eff368252c5674f27ddb134e0