Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 09:17

General

  • Target

    cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    cfafee83bd4ce01dc7cab9cd71f1413a

  • SHA1

    1cbe40b19cee5c640af913f66ae9bf1905f09fc7

  • SHA256

    a1de8f9c963dee1ef60f5db3e6d2c385d552fadf65ccf17533bb0f7e6973c68a

  • SHA512

    5bb1457769ab87a073d7f5efad4ceeb49843b3b454518d45aaf9f389db446a6ac9c88d393895e1acc03439b2fc9f32862bc7db5fab03123677ec43251d147a53

  • SSDEEP

    1536:4QiL9YQPwCPWyWB2sOYv89cYt7wd/ByyLP876lG7V4AD/0n0WzFiy06WlxyOLlC+:D69YQPTOWt7wdpy6P876gV49nh0nxyIL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2092

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          106a2a81281c209cca6ad4d85e52aa3b

          SHA1

          a7b166c0d40c4ba2d08755eba2f5986e9345b078

          SHA256

          c5d24fb8b45e3d5375abb3db2ca2899f2050a2d9ea8c04295c014021dd6c66ae

          SHA512

          863c36b838e78dd9bb5107ec231ff50d86ef47e2296a13a48d6f340cd903b685063bacdf685bd7d039674f5cdb24c0f09d07e41938a174d9d1c13a707197afac