Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 02:27

General

  • Target

    c84bc37e8bd0f2be7dcb355e627b4c91_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    c84bc37e8bd0f2be7dcb355e627b4c91

  • SHA1

    84adec7d4f0e178f2b7fd11a9c2622ecae694e30

  • SHA256

    8134b71f4d395ae212da308805b0c11cf471dfa15b0cd6c575d29c276db81d64

  • SHA512

    d57c817296607e539dfaf00b296e91390f7e4d6446be08c4442b365178d923c38da2eb58ba30f8c1fe6b6bd680fa9cb5ed389bfc23a05f7e9370e4e59fafe0a2

  • SSDEEP

    1536:L0+zXSqmt4e4PERTWjtVrloRQZphnwnvkwWrj3KVeQZYFqy87WUpO7QTr+GbrEpG:pzXFmti8R6jtZl9phnSvkngeQS8O7QTD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c84bc37e8bd0f2be7dcb355e627b4c91_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ef105318a54a5bb25e06b38db9308c14

    SHA1

    9d25da5404d4d9010632702ae76f5dd6d32087d7

    SHA256

    a708809f0a7296c7b8263534378c193d38904d8177425388e951916f529a24d6

    SHA512

    a7f1381c35439e2ca399a21739267c4297c073e938a3fa4489386f255fea976c0e2837e747822e52cb25350eaaf615894e9eda589f4b2ac134557679d4fa4f7b