Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 05:43

General

  • Target

    f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    f071f8845904ef0ea973b363732facae

  • SHA1

    29863c2f357173db0056cd3494cf74f81314d98c

  • SHA256

    9769256c6008f0beb9e89aa14556ddb7d8ab3f4158d6b794b106674c88570e26

  • SHA512

    cf5e06b43179adf242df7d7b58ab77637623962b9b09bf86b64c76ca45a17b25ac8f565f22ad383efa149d3d3c45212560d7838a04aeff2931bb4d974c5c237f

  • SSDEEP

    1536:eklXAps71TVFXz9m970e5t3eO9TsyJDOp7MhTGB+rtg0d+t4jCVgWypOlL6O4p2k:7X6sFxm9v5peO9BipAxGB+rtg0d+t4GO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e872ee417fe68de4a547dcdfb1b46cf5

    SHA1

    2f0fa38a3a732f1407a00ef527574ef6a613a9f1

    SHA256

    08b855ece9f8e05decf3dfe491e12bddf35ffa411a5f7fd0a7c2a48f739bf06d

    SHA512

    26c72539fe38fa18280c254c6e58de69face64470b5a2776376605cbdcedfb500cd6fbfacf19f39846fcf2760db76926658761569c062db1c43d1b11c01d6947