Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 16:53

General

  • Target

    d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    d95c1e48e93a01c3c8bb7c562ef149e3

  • SHA1

    77ec0ea6c6fcb76d9e7ad1fa2c44a7fe6c462b14

  • SHA256

    3d2457d4c6c14e707e659dd5d202362d2c06a8c07ceaf9dd9bd6762ae8bf28f6

  • SHA512

    24fb420c8c3aa12c993891b6b8d3d5018fa9aaee5e3886bc35830a35546a61e41957d0f1978e4f74f77a9df6e729c59bd44ca6727cd2162913929e326265decc

  • SSDEEP

    768:RLullLgsZLenfdeSr6yrETfX4WsdM/stkmUdTmH:xU0Vnfdee6yrEboXwEbUdTmH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d43e9b1aea1e0cd0663caf8d911aff5a

          SHA1

          0b9bb549b6b20e06d4268c46931bf3797d7c5b93

          SHA256

          6d22e8a06fe44cd6dfdb78391846efc09daa0274555f731e77c541eaf4d0cb8d

          SHA512

          ed407b6a8f468308b22118fad9c37077dec26e5f5c683af0b5bf70c60aee0dc85fc69c0fa1ff314df849c8b46f363eb2cef17801c35345d5d014328c90728091