Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 15:27

General

  • Target

    d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf

  • Size

    94KB

  • MD5

    d78b9888dd25fe7191cbf154baab2cd4

  • SHA1

    11be325225cfc8b8ea1bd1c0c4f85447af54caae

  • SHA256

    c4d2c1211a42ac2b660912b9c39e1cefde630dd4b4727ce61815d0e3c89a25ba

  • SHA512

    bd3f8ae556f8a9c3b9d7327d080e3e582ce60e5fd9a3b07ea1a5856ac540f2672e19c24dd006f77ecb34033187d20be8daaba3e4c0618e0866a205d7fb45c7c8

  • SSDEEP

    1536:kxa3D4QEMLRCgko8zuWXZ6Q4f2U+wZ7SW7/zU/8WApO6DTWGsZpgddHxig46IZ:D3xEPPM6URf2Ux7d/OL6D7Apgxz4F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          19e18a76c1873b68628658115bcfe45a

          SHA1

          573a9273ec472e1f7113d87ae9b29e3e2ee7f6f3

          SHA256

          b662d0a2e0f2b4e6ddc5957e3197981aaca1d261be9c80a54d98883cd77a1085

          SHA512

          8e913be54c621979b9fadc1e0fb48876e0493ec4d5ab37bb4909be4c4f2917b09aa301dffea37738fb5c71e75460cf0d0d20a845b18699d1fc8587238f78b39f