Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 21:55

General

  • Target

    f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    f203d10758c0adc16027a0ace476ab92

  • SHA1

    a30bf195ba95490e88beee5c575a39bf3bf8275a

  • SHA256

    4384bcad64d1dd2dcd85b595c7458fb298b57f5bfd1c9566305cff735e25472a

  • SHA512

    aa68e8904ecd842789d75efca2fc99937634d89b964d01c0f8ba85cc61a0cdc9cc878ef73c36598de4959929dc81b7c00ec1175c9d66926328a3258f4bb6e516

  • SSDEEP

    768:qCp0o1BkIlrsU3E3gnxP+5o6ansPinuQC6kAE2P4Hh3NXE:qkk663gnxP+5o2cuQC6YHh9XE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d42c90ccb17d20eca0da25dfe23bd20b

          SHA1

          c8085ff88ecf96a24edfc4758dfefad884667e2b

          SHA256

          35be926dec13c8ef06c9f53f47a703196b1f7170f5233f00559d4987740000cc

          SHA512

          45a3583c49d431d17caa2627f5e81a12b83de69320a4d14cf210dca5a7197e2079ac607f8d6409605574cac44e0382e439c144c4589bf1e02b8091deedf67169