Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 02:59

General

  • Target

    c8ec5257d20a7623415b240269ef997c_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    c8ec5257d20a7623415b240269ef997c

  • SHA1

    5aa473aee66e355a504a2c8837794d60544b4e8f

  • SHA256

    c795bdc64d5ca921ffcce937526e0c090a845a8fff95dd28f6409bd9c6d8c80b

  • SHA512

    01ffa8ec90a861381099c67a8c82b53378bc30738090474e88017fe40afa39d5683834b02070d0caee021c9fff67f82b3827aaeaf5ea062c916ea342f0a1d433

  • SSDEEP

    1536:uOQsiuPET0TvsR1B9RBhaarykYoKh6xqqTR86vECP129W+tGXWOpOZsI9cYP:DxHPET0T8bBh0roKh2TXVQZs6P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8ec5257d20a7623415b240269ef997c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9e66dbb1af15832a73f5253d9549d449

    SHA1

    7e0c0417cea57807854cc5ab0e84c8f2809a94b6

    SHA256

    c79cb185f271e3d72e03e5fc6c119f45c919092a6e28d557cfeaaed2c75f625e

    SHA512

    72a034c1f7d4ca92c3e30b38c913cde1a64cf75e621a35aa9b706175c495601591d8b8346dd868ac182a77fbde315b0913ab880cb411cbcf29936c75e7dcf511