Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 05:22

General

  • Target

    cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    cbfab7a75de14919d25394d041baf20f

  • SHA1

    1e9a4a2226a2f29b288981462eec666063fd0c61

  • SHA256

    b671a531c64e1aa11c24df226b320afa02d58f35798980e1fc5aa3fd30d7b986

  • SHA512

    5affa5d735d64aff96a6cc434428135faf172b67f3296d3dc529e48c9454d3f6c5ddcf6bd616750b64f39822a07b84acc8e461004879c72bc8ea33980fa5237b

  • SSDEEP

    768:nvp5p9AdxCIyNUGW6PTsNDUhOcR8Vr3znAOMUTu9F+Be:Z4fMUEPTsNKiVrzA3Uu/+Be

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f9f73600269bd342d41a34877dc155f4

    SHA1

    09b3686c83d55cdf04cfe46fb98ec2c239ebc1e9

    SHA256

    996eefb25205b1bc1ef62ed4b49f3e20c8ce060fa87c579140124bfe324b1b6e

    SHA512

    79d11e42e61fa7e3f193c94d742905d29c549d76c8897c2c36e8fde1f52b001c97605ec2afc93376948816b142616ab2a53e861d977efb087b806b7cf3d0a4d5