Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 13:54

General

  • Target

    ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    ed93d35da264ac9a7b08f4c221f70734

  • SHA1

    d0299d6f4ae45cdcd09ee76ab21bdaca6107a139

  • SHA256

    c98bc52f8e40bfdeb6853ab1771e7fb660b9eb1e9b92782dd2a6fe40cf7383fb

  • SHA512

    d3866e3afffe97e732ec7546fca89dfd9c09b001b51b474f7c6f93c62acdd82affe7e4f9b26fe1c2c28ecfa83c5892d4a9105626b3cb4f05e1b7a9f172371915

  • SSDEEP

    1536:xVKla317BJ34EKLQ05H5+uV4Ll6WGpOKCWiz2uVYXLAE0TUh5NaEhfA:nKY399KLt5ZJV4LljKzKLE0ToqEe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6db3fc5327a4f73575ef1cf04dd374cd

          SHA1

          65c49f24cdf729ffbb4878ad0d777ea0c204442e

          SHA256

          475e726e62db263d170521fd6916b306354aea353b94043586ad47c848c9026c

          SHA512

          63a8ba71da05e59e518c80ef576d61653298532c017779e15d0d3aaf7d84a6db974d8996a22577a89dfc08c7d508fa8ef7c792dacbe2814ee9b2a0035a7cd405