Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 20:02

General

  • Target

    f1cfdd8c17e7c6f025c31af54ff95098_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f1cfdd8c17e7c6f025c31af54ff95098

  • SHA1

    a24e904c52b5b8f684f1791ea6a58372f0dac609

  • SHA256

    5843e25995bb55a0962c275df7ce3e30cb9cb96d785eaecacc251b2a9ca8a910

  • SHA512

    eb74485762399badc7e791a0501f207d53915f65546d615b8f1870ca51edf064ab320794a210a8b65fdb226a356fce28d93bda1bcd295a0b0ed5e0907dc6fec0

  • SSDEEP

    1536:49n2xHkJN/GsgVzuNG7F8YpWHpOvTWTbgehi1owV:8UM/GxzuAVvobBhi17

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1cfdd8c17e7c6f025c31af54ff95098_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2692

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6ad3e8636e723cdcd5a73f4ba72cfc88

          SHA1

          d5a006db72e7519830c903de6c6d510abb93aa9c

          SHA256

          6c3fc0802f081052bd87ccdd5ab88bb3cd2b404953702fe2f4039ecce0ebcdd0

          SHA512

          f041f9b3e69a2ef75a0dd2d8ca4a901ceda5b2f9f0e12981f7185d0092c6bf203c2dc2a6155bd98ba0e96355fcd23e59ae9144f587292564dbff585bc1d429a5