Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 00:23

General

  • Target

    c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    c5cdc84f8fa9401b73eff065413be8b9

  • SHA1

    a6cbea2bb752904ea7126e5d0ec0c582390764ad

  • SHA256

    5a4a9c55d90c9fd0c5f5c5bdeab7180ef1a095ab6a8b641b094adbc8033469b9

  • SHA512

    327ed01f58b6b90060d6fef8a9998cc790237a16b1313b99b62e76d9827e6d26c788dec50447888a3b3b4024089c205d2b041e8c05c29d2b2a81a1cbe97af707

  • SSDEEP

    1536:DBtG00npOVKQanA66rqWlvFe+x6rqjWm58ywKdWLWxApOGLlYGYT7G:VtG00nWMnqqs8QkGwiWU3GLlQW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3469f2456e7927d3c1c90e57bab58224

          SHA1

          03e4d4a08963d5dfb573673a97f16f8fcc564cdd

          SHA256

          2ac7e6d9001d6d037024f749769df459bcbf3d18d3949a4b15cdfdbb4c7ed3ed

          SHA512

          d9cf619b45b0b7ad863cb1905de7accc907deae99d6453a720a84144c0a4a02812d548a37fb161079ef008b13c36ad3219ecb21986c34e52f8e84bd43c14b48a