Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    15-04-2024 03:48

General

  • Target

    f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    f03c184530901e7288607c765e4f88f2

  • SHA1

    8eeb9f6ec51c5d6597e95d8e73d33a6cbee96e9e

  • SHA256

    560337c98c7710c4c4e6e043978c46f519aa6bbe24bc0f390944f81adf164d60

  • SHA512

    202a7b0ebd8782956c99aebe3bdb226a43777631bcd3cdaf89dee1d85a96e844e4efc049b0d1cad00845f2cd77ea7094776e2ae88afeaff5f84bdc3a26072178

  • SSDEEP

    1536:GZuZU9NtHtxJcsJCI4fGyp4y2GK0ubTLQVLuk6fN0PgyKglc0f:7ZYvJFCI4Ob3dJtN0P+glT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2691a58d1349693ea1d44406649fc505

    SHA1

    38a4afb9c1b0c19c3240b7fe6704a486cad590cb

    SHA256

    ead8b6445844f6676b08d5687c646922605affa9a3a40a46cce0ddb27e999141

    SHA512

    466c7ae12c4fbbe81be5faa8276eb4c084d6572a01c891c7b7f9c9613b252b0c89159fd3ded8858c1ff297b2ed97490240cb83f98ec40095b3e6a218d4967c7a