Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 20:44

General

  • Target

    c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    c24d475d94215ccbd66db051a58bda32

  • SHA1

    e8fe538fd906b0f199bf0a9900349b0502320538

  • SHA256

    1e22d0d0b3bb83d98db5d9102b2ad9d982d52a4c81258642f6a6dc4751458cc1

  • SHA512

    f785f8b6bad70d8b8fe2df0f8785d0ce2d910f516d8cb22e10f8c125c255659b50b1d6ac62806eee02969b67ddd19a73ab5877fd7701bbb4f1acbde05a846604

  • SSDEEP

    1536:FTC2NPtU4Mjy+snpyetrl9exf3NgoYaUi3W8I7G3Gb//cNWFr2ZwwhA1CVLWQpO2:NC2rvMGBnrb9exPwpiGXXb//L2ZwwhFd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5ab1f067dc9a51a978e54e84e59a165e

          SHA1

          3d18ecf776bca006272109a718eededc99490b33

          SHA256

          0e50c8506584eb42b2e4a2af4b89cd6e772ba75706c47dc34701bcad08a53834

          SHA512

          5421c3de036775830fded81c0fefdf4f5137ec1def99c81512d99d066299a0902986b540ccd78decf6c6b87c8a17c0ca2b1e77c6b201fc460aa9efc331e5e4e9