Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 08:07

General

  • Target

    dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    dfa5938faab7f44a55159dfc720cdbc7

  • SHA1

    98ac6a41d81a33e63e8c3b47d9e8c99e737bc009

  • SHA256

    554593f67661bd36ad79d99b2792477e9b409ea913c083cb4fdd7d17db57733e

  • SHA512

    21579caa494c4afee48de92f240ad3482541a28367d1863d33e8986353a18d7f5153301b5d4b39b6524892a4938e07201ed7a26d4423cd502e521f449a566108

  • SSDEEP

    768:lZMfavsYMcdUPl1DLzX5icLNX6Dwy8XNXff8Z:9IcmPl1nz4cxXXpPf8Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2692

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0de6e7513a84dbfe215efd76fd97387f

          SHA1

          7528ef0860292faad910d7be2ca1d6d38515ac83

          SHA256

          ef5cc941496eb2af38922f7b578de1e583787ebb1cfe5af6eeeef15301351805

          SHA512

          0b0f56fd6171533668fda1f9dc4542daf04b678aed56ef1096a7b85259b4a6c7c26fbfd816922cc8e36e38b7798a6ec7c13dbc3b36da1dcb19c14fc5066c1d4c