Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 04:39

General

  • Target

    cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    cb12723304be7e05bdd43707423e50c7

  • SHA1

    3a58292fb374a3b10b4c62e6450d52d93f943057

  • SHA256

    b492b77a947434f664d5f05bd362e8ec2b9ad80c81e590c5d17a03fcc2a22255

  • SHA512

    7495f6744be54f2070111c00c77b9b50df76f62f50d92a6afe196d230ce7e892ec933009cbef795e08865f2df9a91b845b3b32de1aa0c59de0709f49e5a3e891

  • SSDEEP

    1536:zmlAMkqETIDL+xZE6GmA6gR1/xZ7Kvasz6cNPLWGpOKd8v0YKWXakYuIgO:58DLgZBNA6gRV7KvdGcNUK1YZguM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4ff6414a045a6368dda26edb64055f45

          SHA1

          286070523b03e36d6b600567c0ecf3ed186fe63f

          SHA256

          b89213be9afb41a0b26635bd531a4730892012f02b6c34f87c504947996eb9ef

          SHA512

          99eee450baab5fa6161506c954ae0b6c7f3605483508ca03e2c078f735846760414c288e5cdeb1321368798a8dbb2983355d17606f99aa5acb35683c581951b9