Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 19:47

General

  • Target

    c127aac892584a0334826f19fe59504b_JaffaCakes118.pdf

  • Size

    133KB

  • MD5

    c127aac892584a0334826f19fe59504b

  • SHA1

    b818182307309fc6ee4c02b019fb5ab9fe86dab4

  • SHA256

    423db3df462c8c39729692f308c081adbcff8f61cf67b457b7315499b24b9151

  • SHA512

    1bfed0c9028764df601a8e9e969cf769abab71a4cdf3b4aa990d7406f86a71b1884c785038f8e98cb5ae0ab25e38b01ee4fe1e377f3fcba34084e6f020f57f8f

  • SSDEEP

    3072:CMlphrjb+MWj5duDwYCtBXxJEmdg87/Z5WuRucKLgg/k20:C8fajzuDctlxjdg87//Wvjl+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c127aac892584a0334826f19fe59504b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          93daf8178824225e62fb40d510b1f6e8

          SHA1

          e3911743d1a60c1f981cb19e78943bee3921b0d4

          SHA256

          aa14e0e8bc30f295c5aa8f3a23bcf45bb6c204ea5c048d0c7390748035543a69

          SHA512

          ba87bb11255f9a6221560cbf556e9119d58572ccfe508bd2b846fc1e5670ae85f3789121d67d3ee2df1212b54767186ff685c0f48ad2021d06f0af69b6067a93