Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 04:15

General

  • Target

    f503651347034e8e05df6d9d8a57bd0d_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    f503651347034e8e05df6d9d8a57bd0d

  • SHA1

    92d78b949632a2ed23254bf4c210682c8a0fb049

  • SHA256

    1063c068080cb6f55c68c9faa200c10dbc15cb9d2c7db3c61d1cf12d463e36f9

  • SHA512

    75def4ee9b2ce6d507489ff2eebca25d0181c65e063962b0a0786ed32878582aff9236779546a1a77aaafe3451d6d6552c8657a13db6b8faaf179b410c445c05

  • SSDEEP

    384:zbR5mRAejeVEcJLH2ssN4SlvAqnuV6heCNrEwfXTk4Jpv1Q5h+CUSTYN3S835T51:z/B6E2smGwAO7EwfXTkGv2cNJh5mHyTh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f503651347034e8e05df6d9d8a57bd0d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f78f9b3c0fce4d3f231a3ac9366130f9

          SHA1

          3418eec3f226f059edd40d5b5235367e9dd56136

          SHA256

          8e795f0d0e5201b769fdea1cac56ecbc6f3ec43f6ab082993f5bdc91884885e2

          SHA512

          c0a3def4eb59afc9bcd1a4e611bb0f525c772ce37b00362643f1817bdd5b987b21708ccd5ee1e3fb247c6d77a378721324c4a96e002a64cc6cf8572a6d1c9da5