Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 05:47

General

  • Target

    f2d0e3f5570eb4b62404092ed89600b2_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    f2d0e3f5570eb4b62404092ed89600b2

  • SHA1

    a260a4df6648ea780e1eb3fa529e556c74358564

  • SHA256

    e92d737507bba422f5ce3dff33ae5e3ae339526e2348ac081f86fd7d040239ee

  • SHA512

    88f62c384ebf34bcecb5156a99cf6bff32076874a032d74d04beae47310f2a919dc17cc290928b68b742cf440643587ac32019c130ab51ae616e3c54ac550fe1

  • SSDEEP

    768:jfdUk2444UdzqrlxFnSEcmAmc/25HM0PpcozbNagjdt0TEs+wGm:/UMs/mA725H1pcohagjdaLGm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2d0e3f5570eb4b62404092ed89600b2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    34fb57e12b8cafb41bab8c60d0652136

    SHA1

    5d548fcb946a0f549f306941fa8190f76a7ac4a2

    SHA256

    935ca427f856bfbaa12091e7755dcc53907fdf7bc71b609164a900fa05001f34

    SHA512

    4b04242345a2f938ceef6f4c8e70aed573b6a79c8d5380ec298387de570f026ec27f3820143d61aa06fbc97fa550ec2d74a2a4d7e552cb2d932382e4c14156ce