Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 08:47

General

  • Target

    cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    cf00d7a1bd81737742eea49ecbe64012

  • SHA1

    4c3f760bd1dacb52530d40991fb283c7e8f03525

  • SHA256

    6d3cea23aeaf95d14c2c2c8cb37647eadea342cf5eedfceee7f1da840f7bdf85

  • SHA512

    908f7b0eba55405c2969247911219a5e5435e51fa739d4510a9d89e385b7def04108e8d98bc3b8e34d373b631eb83c1c5e5acc9beea566e8f20024a619abbcdd

  • SSDEEP

    1536:SqVGz2cBcpsiI6+Y3uJ0j/sSaVH5UxSFINbiWkMzUafQyvlYuMcWtYk0sW8pO7hC:BYzpipO3J0j/1cZAiMZzUad5qD0/78

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2428

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f245394d7efcd72351f73d07d83c4f7b

          SHA1

          8d7ab86323adc1449c3891a986f5cb919d45f126

          SHA256

          680fd54b72cae6dcffdba2089af6302268227ad6565098e655ba37878a153cd7

          SHA512

          6e2306ad4a670db3f965a424bef08be2af1eaafdf6cc81b3c041c6e9a4281b661a763de70b7a2c269c51e6dc748acf73ca55a7d3103c754fb59133070ce2d26c