Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 03:21

General

  • Target

    c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    c95e39a9210e1b897cd84af222f7226e

  • SHA1

    f5d0d370516a0dda87786b7fb28000f85dcf8e34

  • SHA256

    8ae65f9aa4b0778e1869dcbd9bdf62014aeacfb997fef23ba6d08610e1e38130

  • SHA512

    671315d8008ea45cab824e9a441eb0b474d1b324c70d8685c943bbf3fec9b256f9180e3cbe3439d23742ea86c1db2235e37a28cec62a72014007a208ba4f77eb

  • SSDEEP

    1536:4Vo95QJd36RWhJBc87+YLbLV2dmmEAA62WBtibqRsElIrgWspO2cO1:t+dqIF7tbxolv3t0qRsEML2n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5872e354e7fc8c25e034e9a822f89c73

    SHA1

    26728ed89861ab0c9537633edff25ea2e4ec3c53

    SHA256

    ed1edf960ecb7f56635cb924e759593567013dc90fafca96ea70f2c908e284bb

    SHA512

    537a5a99572a053d8a301c8c4b2abd0e4bc08f1b82451887a082827ef7e52ac916b78c19fa502728bbc1d2073f04a3e41956b3dca2b40761a86dd512d93bb3ce