Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 05:22

General

  • Target

    cbf65dd058ca88c47e7cf608fabbd37c_JaffaCakes118.pdf

  • Size

    101KB

  • MD5

    cbf65dd058ca88c47e7cf608fabbd37c

  • SHA1

    87a360349fc924758894a8cb798623dcaf561238

  • SHA256

    423bb7bfc4af9b5da01e703a53b7b8034dbf4e2d61d2d5dc3b42c7ee1efd4cdc

  • SHA512

    c4ee66e3b4e214bd4663e94338c0e8186b9247becb584f905d181b257201d05a8c483d7ad171eeb754fe29de9a88ae8c807a9b2e3d9f61dc8c13c08021e82ab1

  • SSDEEP

    3072:UGH9zB+9ux1JIUmoW4XzVDLmrfOfISCGyAAzZ7jo:Ui1+9wa9sDVDLymfIVGZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cbf65dd058ca88c47e7cf608fabbd37c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f80a06147fd398b6af7424f16ba99928

          SHA1

          432e4076f0405ace7167a794e518c7d0a61865a2

          SHA256

          436aeac6c2bec35325b236f07cddede992243d0a091d24b4e9c403fee2edac4b

          SHA512

          9fbb8261f347234a7f0816d13373210d73a9d6895d31cbc6220814dad333b40a4d90b264a59d0cc496224aa132bc8886dcb1fedcd83b44ab50157675389dcf99