Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 15:49

General

  • Target

    d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    d7fd791b2db8b31ee9a235c7e7b366e7

  • SHA1

    323e866c7db96a043df2d1fda5069e2387932730

  • SHA256

    b634b85daa6ecfef849d84c15e70db5f44d4fcdd78d48927055adcb542abba37

  • SHA512

    ac8e3b9134b0e6d87695ba6dd790b8ac594b1bb016ac469fec7710939df4c77940278a41719548ab865b629006d04f3045ae3f90eef319717bd2634b309f4eca

  • SSDEEP

    1536:n6hO14l2KtN6Iscg8NODzz/xargdAcvo8x9kxUYdZ3Wnasc4i/YWUpO7Qyy:6hHlzN6IscrNAfxcgdAcARLic4i/77S

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          817d9b74c8ccb9e5cd0e8f18e5b1e52b

          SHA1

          7cfdd3414115d3defabb82d43e285c221e0aa4a5

          SHA256

          c2f017504c6c2cd73be30838058a4b05222276372c4b74e5ecb9ada75bc3226e

          SHA512

          608bc81c716bdd074be6db28f9d39c5a0104317910365b2795a66eaea453ad0476d125b0de2a054e4b8092b5922aba099133de69f4e5538563b3ab6fbae48395