Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 05:28

General

  • Target

    f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    f06b8d1cfde09ea8055962ae7a43d61c

  • SHA1

    dd244f4a63207ab30a6cfd2bafeb57e870a257eb

  • SHA256

    9514f2ebd538f782109f44c40b1a258622cace4569af0fcff5f7c1e8c7bffd48

  • SHA512

    30a89380b33af35dd7aa5e6cf8cc586d09a2bebc6ecaf541d8cf3b40d7dd9ca0d040721d1534212b85a74b77fdb89f8a07270e6acd28c4c47821638b1491b219

  • SSDEEP

    1536:219bYl6KY0LdRdfzzIRcUrYNZuwWEaN7eSORLWxApOG5yURh4p:IiYSFz4/YN8caQxU3G5fo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1056

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          11193d8462202cddd63957a950254b86

          SHA1

          6e3aafc1b8d39d3e3cb258d5a782fc0e0d465e6c

          SHA256

          41f1ad7e015f00d014ba71e38eaf6459ddd8e977973aab555e1113984c2163d0

          SHA512

          90be58ee19339e42660f7bbd1074169c746fa92c0c352a70a1dd50bb42ebc18f1c7a741ad644e370653a88212a638d38460ab71f0cb6992284cab1c14db2765f