Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 12:27

General

  • Target

    ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf

  • Size

    90KB

  • MD5

    ed6bd66648bb9a38a9e567d7dc8c9646

  • SHA1

    ddc4e5c8a48f9b3e04fd4489a8cfcd24300496bc

  • SHA256

    0a9fe1458ed7f195f587d8da735288a44a07e69a82dff52ada226fbb2139ba69

  • SHA512

    c321ab6039929592e3fb4b116f4554426ef6a0b400ddd79c19dbc5b2c36a67bc2b7bbef6f87d4cca2a4be61a7d8d0ba37305e056a7871dfd4d11c36f2de07f00

  • SSDEEP

    1536:rlefI0X6A2HEjmO8l8y6JJF3CZlRWyWYtWh9AkoszZ0yW6pOu2Nzzm1g/:hefXK2Jykr3CZOyWiko/fu2FzZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2100

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a0f6eb7e92f051e829bc8ce5b962460e

          SHA1

          00d7b54e08a4e8c63daee3b61e49135849a9b011

          SHA256

          115d11c708ff8281b22af361cf0abf61efb73c56c04490d118bcec2264e49e32

          SHA512

          9832266cd796a30c5ca39c620399051cfcf11b8ac69e656fded25d16e4556913b40bd57929f3723c8022a84ae5e074dc50abca847caaad106b2678b551399134