Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 18:56

General

  • Target

    c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    c024fde31c5300ebf121da9188cb1726

  • SHA1

    4c86eef05438600de66ffb022a62605abae69a8e

  • SHA256

    85fc095fe4de9deee11d39d05f5fc8c0ccd5b96f8c019532252382681eb5ff3c

  • SHA512

    8eb7b0d64a5f5ab3f3031dfa6bccaf7971ac5c07656365c4801b1e062c8da7eaa6e94d14f3a55ce267a6ee6b8a33e88f06864a9be47359fb670b41b57526393d

  • SSDEEP

    1536:UzkfTZW4S6skvA5n8A/uSwgkQMHJ/SrtUWGpOK342YoNx8b6Wf2OKbufrvYcYiPz:SkfTZW4S6sSA5n8pQMHkTK3abN2Ot/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dfff59be3ec707e7bcad12cc05b1c6f3

    SHA1

    1c05e7eae8c3ce4eed161481d8f254986b82cf6d

    SHA256

    b9ce5c3352108a10f6316a3432f96f04be19102942b809888c062a1241b86fc1

    SHA512

    594988e9d32d6a4387f7a6fe9c02f7b1c30f24510820e672a16c8546810b46bb3bc9e41f0d1945d29e6b59261c92bf6af6820b7c1764f3cac7d8fd5e805c7317