Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 12:00

General

  • Target

    d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    d3245e6cfe0b792930f6f2ab9bd4a1e2

  • SHA1

    81997b340747eff8b8bf990594c8e6394cb1b1b8

  • SHA256

    1fa034d9831080f2c35e1053dc63371cccfcf7d911deefb8a82777092cb40fb0

  • SHA512

    561c8723ad1183b3ebcd48b56369600117ea9bbe2061087b5b623a5ae1eef455613311127b969ab871d7f71aae4c35e723144d42056cb929ca24cf6ae677aab1

  • SSDEEP

    1536:qxrzh72aNVI9raCOBE622iN4DMC0XuKxzW6pOu2hl2MTCWZ5r3WNeWFE+:yR7tQr6Bm2P1Sx4u2hdTnoNfL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2864

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          65d6d50f9a5a2016b82c83fb87d52122

          SHA1

          0d66b30a769a6f33c42e9b2e7799aa582faf976c

          SHA256

          1d65f8b95535f76394235ebb906c57fbb6c03f3579954f174b6b3a43e8eef953

          SHA512

          6ffd3a19a1299ae48021d7410479a2a56a20affe5a6f362cea340fc7d2b8c3a40e9bd397116017f763a097f253a2d6e3da7d20832f24df86e92da5c96c337968