Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 07:15

General

  • Target

    cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    cd2187667cab3a1203f4be7d8232161b

  • SHA1

    098c31616ae27bc9f55675149d28ca09085ecf95

  • SHA256

    3e2ce2fc672d200bdd8310b54bb6bc620bf1b5937e470df3f8822c9854b43b3f

  • SHA512

    ebd56fa7c8b93aa5186d92514b3311e6265dfd17003ec7a9c347f4a28433f21629edd83fda454f84e9c56640b827a89f871f9ee0e0a7ee62fb7b5cd1a0f1e248

  • SSDEEP

    1536:7kSNMEQ9uJPSt57VzehfPsBTS9d7TzlDeXRQy5Y/qWxZay5WxApOGzW9uYfgFvu6:ASNMR9iSt5hyhfoS9J/lDVy5YLxZayeI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads