Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 17:40

General

  • Target

    28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf

  • Size

    123KB

  • MD5

    28814ee2cf529e8cc212970ebca6a02c

  • SHA1

    454796713195b7b44e3eb6320e55e5b607765f0e

  • SHA256

    461df431a4425e1364d46bfae450c26ba04a2af5a9a962d2500048cfab2b031b

  • SHA512

    cefc6bf276ae10fd49903e535348fa914429f2cdcddd4edced6a8c6f6255593e1b2c465e7d4158cf5cf1cb8853c6180c9e38b4d3661ba941f2d1aa8cdaba532f

  • SSDEEP

    3072:uqdsWNjitrtQamhF2LiCs82XyXc8vr7UskcMZV/k:unWNCbmz2LkXys4ksv0a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81d8ccb83c282526718eec2f8c183b8e

          SHA1

          fecc3dc39d7f3e305c6c2d369e7a38d1daa8c90f

          SHA256

          2ffbaed37b62bfa256f15b10bb4674620f520cfc43976164df9ef6cd81f68beb

          SHA512

          6fbd988613d4c5853bca6c129cee7d2d12685f06fe557249240bf96835331657baced76a956a419eb4b047e744978a441ba2a6006f5654140aff42ed792c7877