Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 03:13

General

  • Target

    c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    c93b393c4cbbe0b14445b1e8659ef4ef

  • SHA1

    fb66aa65e8c7fc89ab18340e159e4ff1b0e54adb

  • SHA256

    ec9ade0a00ee6fba7ac030f44569c03dd17316ba42a4dcdc94adc6694d09a0b3

  • SHA512

    521b3e8cd351fcc071c42b38ec2f6dfa8287227e107ac38ef91257c9014dba896d606ec57d8602bef218fc115d0e3c15ae09f7808cd03aee0508ae455066be79

  • SSDEEP

    768:fOiJmaEeMhV2PIkrt3pgE5OlJIcEXK8yt4puzt4WKr4tszou1DQIk5:fOiJmaXMhV2PIkrt3pgE5Oz81puBArCN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5c61ad6ae11f263f49714021a301ace6

          SHA1

          bc138ff0a70f481a5f940b4ae30eeb2e7d677132

          SHA256

          a68b24ffb3e7a5cfae17a9eef125685a8229d0a7311f7e5f43b3ed2688a9a866

          SHA512

          6bb53017a7e6987703a7336659c0c69c68de4bebf8cd556d46fc34203dd9617967b09b87abbe9536ed47f264e8c5dae4babda691c6aeda52fac92d5ce3ba014f