Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 12:29

General

  • Target

    2204127d998b836859f75c3307087058_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    2204127d998b836859f75c3307087058

  • SHA1

    4660c9fbcee9db2b1cfd341f89c68935d8d09479

  • SHA256

    10601321e946c560dfcade60c8b7d2661e1a833561de3690450358e58869feda

  • SHA512

    37ba6210b1757de44414808d16fed10db1d2a818fd40d82da9602d0c3ed8dd20449c796640d76465f344ac8fc7670825fd06d66595621f5662b91b4422a7980b

  • SSDEEP

    1536:eyko1/pBNogDdF/wVqPm0czWsa7Ok65ZB0ypWUpO7E905s:Brp/wIhceOkeB0yM7g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2204127d998b836859f75c3307087058_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2460540be3de1bf2be7dbaf19979c0ab

    SHA1

    998ab182aba48b495e03d7c959388310312c1300

    SHA256

    9f079813534c2f4ee9b67ced72f589233ac2a4f30f7b4625d69b768e7c03248b

    SHA512

    16367a8a39d651606aaf934a5c770330c221acff941551857cfe086676ec86ffbc348c0f25cafc5e377d31cabb2f9297e675e26933376b8977852fb983cff7a6