Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 05:14

General

  • Target

    dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    dc2272493ac9178f42d0ab5e3ea44115

  • SHA1

    bdc94cfc6903e425c3b305054252fbb422ea78fa

  • SHA256

    3ff41af89ec07f8d844277be6c84bfdd7540555eb7514a75e54a9771b2c693d0

  • SHA512

    99a74df68a6e1cf17707380a693a196353e2bf2999ad0016bc0bcd1acb553a0515a4f05126bd1b15e2472895af93e76420986f350d1c8364028e61defa450bee

  • SSDEEP

    1536:tZx/j9ODQ/Jvr+XYy4ndXh7ZWbpONiWylU0TGz:VL9ODQ/NrQYFdXh7bN8tm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    38bd02e95cbd9abca0ab712546d50cc6

    SHA1

    d47d103f2e50ed3d6c89a865a1c5aec11fe7a30a

    SHA256

    03f8e2f75188336e67d3fbdcf1de375e40f72a6e8158fb2f45426775cdd0fe9b

    SHA512

    098a4eeaf675e5486cac8a78adec256af68ff4e911753c2fbea973d0abed1091a43461ad38685b07b72ccb061542601d084a3d280903b76ae424f55de5e163df