Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 08:01

General

  • Target

    df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    df88aab0ba1d86cb3bd039b7626dc52b

  • SHA1

    8668f783e1e02fc752d0d624a60f402f47eeb8fb

  • SHA256

    a50f4bccb23fe5e1aebdd050449a1dd1182c3f4485c1c8c3ea5edb48065e249d

  • SHA512

    12186b917655b4f9f03e129c442a98ec2f83013aeeb998658df213011eeaa7ccaa33fb7bf1b2f2964e61661d03e31e3672844c07ed6fe683fd3c1fde415d2103

  • SSDEEP

    1536:mGqkd4Fv89v60J5R7zveTiO7GrmWsD5yyN5Wa33JHkA1WapOtQuHwHQeyG1D:gpFv8JJPve2Oyi1D5yy5EAqtQupeFp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1460

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5a6f1a1ea343b797cc4715e0f148ac51

          SHA1

          5a02303bf23fa6129196df087edfc501824eec18

          SHA256

          e03d60099c1ec2a5b952979bedf9884c06c7824e0b7e0ee397dbbc8f95f6ddba

          SHA512

          aa3ee6f97337672672bbae5326655f5cc3aae04a272d4b27ec4b8096234fe972446ebd6385f9ec10dd3bd8c55bc4a5359cc8caa28f10b19d79809173c28bea1c