Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 11:24

General

  • Target

    20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    20ce72920ccc1a8b443f84314a2fda98

  • SHA1

    a79e8084763b114c13b00a405fd9e18c6c18b9e0

  • SHA256

    54c9bef6b9d49704dd2a5e44b49d8826b15c43eb8c72e0d60d7543558b355b8a

  • SHA512

    55c5061de67d04e02b5b344483d937af855dd3a76490d072999f220e73d8e9d5611d07c7e1d92beb0b5200dd3e799a3032911c88e4f5417b64bc88c94d82f4a9

  • SSDEEP

    1536:0D5zr+QVRVl/YfbrHGX/y8Ib+a7S2QSaF9yZbhZH6W08WqSS3RaXoKWZWbpON2ZY:4+OAvNb+a7S2QSiyZ7oGSS3wX/WbNH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2599d668497917751f8db4b30310b741

          SHA1

          e5343e1e2d5edb5ed861ec8b96bd800be56f3b50

          SHA256

          faa0ba6b45d7672a95ab05a41f353c9134af5734533035d7c24cb406a9ef8a83

          SHA512

          96571660f3403a725462e1b6456c5fa386f890c5f51b0b0e61046c38fd94cf107d7bd1a4531af305788edb9814ea1107c563f42662a0e0dcdb6c5ce15eb88480