Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 08:03

General

  • Target

    ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    ecf358e283683186fca9602372538e1d

  • SHA1

    df9f6b23af07d946006bea35a918d670ee39e015

  • SHA256

    5d59e692b167a0448b65f2befae8aa0d90d1298aa514eefefd7245da816bb872

  • SHA512

    a37159df8a7573452a1f845831f595defd5264b45156dba12e28421c7f1ee44fe13f9af8b65e6f496c448d61e55c0013810e031bbe75675bea7f0953700b4ed1

  • SSDEEP

    1536:mOMeQgVDuVCYwfW2fbWbXdEOH3ZVhDOX9/nsy3rzjMsn7Fr7fCYu7fwWZNW:ggVDYCYwfW2fYdTVOX9Psy3rzjTJr7fD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ba5d1e71953fbfa3e65843a2458eb92b

          SHA1

          6cd25ec501bc683d431ac9771bcb2e0f8a0fc19a

          SHA256

          94fb56c9f8d9d90996dfe32ea3fa66984032c852dfed65288c95d28252796a7e

          SHA512

          6afe626e7b102a9632abcb44e060835de314d515402b5d550e5cbe07ede09975d4f81495764d04b1c3c09853bb71d42af5ecffe11408e56db55b3c81162805fa