Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 08:11

General

  • Target

    ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    ce3e82bb91a636f02fcb4b64c9dec697

  • SHA1

    d05308e2d4e42cec8595ea4a91dec66fb5b21c7c

  • SHA256

    aaf629926de0109370f6922dfb071b5815843a91403553e5d7dcfcea85d5fe21

  • SHA512

    b3ceb499a972b1c5b4a86b3881e66c82ee4e3360f9a47ce30618b2d336c315384b0ed6df0a9efbf44ee5d542b5166487168c7aff1ec0da60d43b9914e811b24a

  • SSDEEP

    1536:49HgzlwQgv0RW5zjQPwrNfpN1JjEWxDTJOxfi60YzH8bUAWapOnT/6W:0HgG/j5zjowrBpNRDTkxfi60YL8AJnb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          232a99cbd31d92558b2b8731f3eaf196

          SHA1

          1f4c099da917497489d0c2a8278973ccf9350aaf

          SHA256

          ae844444a6cb7582bc313a5e1f5f848983b5f576c4e8318a56fed6b4992bc012

          SHA512

          226a0e2d4cb9bb5dd0755802668c6a64f85cef0ff4cc9f12f952bc30f40b39718b7103ce8ef0b8504c5ae9a61d2143bb741763b73a15494125b01fa7bc7cb330