Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 22:35

General

  • Target

    f6b8c23f1abcc7fc05fb872b4fa32200_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    f6b8c23f1abcc7fc05fb872b4fa32200

  • SHA1

    5467b69045cfa8632078e2784b98985ad189490d

  • SHA256

    16a236d05f9ef880c7c4f04c66d3cdf8467cc28cb5eeed4763046f088e0dd43f

  • SHA512

    ed68852917415ae9e46522b8021179637bfe358e2c3c72128a19e6f5687a48e2990cb92154428c45d0b03e136b0de14393a1f713356fed075c89e1e755c13afb

  • SSDEEP

    1536:ReRGq3b4vPbMsWLrDNtANFnEKcZAWIyXv4VP8QRAYyWQpOCWJ9:2b4vDMsWPDMnEVAyf4pDuYVC2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6b8c23f1abcc7fc05fb872b4fa32200_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2e0162c046dbd57e7cc5d17564203b6f

          SHA1

          ce1542c82bf5abc0f627bb64828707d7f5c62c7e

          SHA256

          a1a1c8b446678ff1a03a3317a2b7d2b469cc47b1671297ccdb1180ecce3f5840

          SHA512

          34a3628d57f76dcdc265e426ea536847bce592a4d55b3260b4b693a62c3cf8155e8d53abd1ecb125f135b01cf8fb563ef807fc16ce80e60665cee9b7029d73cf