Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 14:52

General

  • Target

    d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    d6d32ceda8b20889e8b3f2923c244753

  • SHA1

    1d3ab4fd801e53b00ed38caa6c03b3fe79dde1eb

  • SHA256

    6e1112de1473b7764e3b931bd35ab9ca380c228d3054ec5353ccad9b16b99722

  • SHA512

    a8b0843ad0e304039db89683999c79061d998f832b0ab238cdf14773666526cdeed80a437898d091d0c4cc62115c974aecf9421f649c114400adf515ad24163b

  • SSDEEP

    1536:SH+sRIptuKH2la2kcQtJ0r/k9oW6pOu26WTkQq1hVopBm4U91W1i+t:cI6KH2l8cIw/ku2RkQSYB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5432672894fe233512089c8c4f9154c5

          SHA1

          95221c9a7fa7e6ab6e3a4106f1bc13d3d82b4325

          SHA256

          7b0a605cf137487a9fc5ff741d8926453ddc01630ad484aa61a44e287fb63013

          SHA512

          c747dd55d9142319fe878be061b8bff078733c1d4ef613e546ccc0883bfbdb646c4e6674ffd03ae4ac69d4cb2d54f842e15ad2b1e71bffe16009ef05bab27568