Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 08:47

General

  • Target

    f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    f5664fd2d1f808f7b474ac2b2039d1b9

  • SHA1

    eb096baa890883e4e5e857b80b72bd91bf43958b

  • SHA256

    8383a4e49cfc9f10f56790f84585f9f5e60f0a058b642ccc4a429e2ffa646ce3

  • SHA512

    465003f9c484d42b913375dddc7ddfd948ef1c425425737ac26dc76807b7d22b1043cd975ceee2253801d5bc980753a1adb79eb4194850a817bc48893c8dedbc

  • SSDEEP

    1536:7Sij0UZaGAgfqMF5NzbV7P4f3B3ubBxgN7MuL2dYkcG1YvRu8Mc6EVmQyoHZWOpX:WiowaGA2v/N2x3m2N7ZL2ajvmGHWwrCO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2624d71fb556982a24fafa99a51da1d7

          SHA1

          c7c926f67407b0e784afd9252da9da64fe1bbf2a

          SHA256

          3d9b4da2e322614f0d467db04335fc7264a90f6447d60f08fc0eec026d1d9f9e

          SHA512

          7f7959247209f5a43e4c8d7e04195af816752c0ca7796bcc16397c5e4549d3b8aaff371cd0fd595e10ecd7e787ceded584f50daa52dc7b2ad29de79b14670bab