Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 09:27

General

  • Target

    f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    f577b9308c3f47b8a3c87fda3057b8f8

  • SHA1

    2e28b67615e0a20cd32ab02c3979b992ca6ad7da

  • SHA256

    c976d86aaaab0ad32e662d53f8fba508eb8647af2138a8e6b3b2b739269c090d

  • SHA512

    40b20f22f4885e2a37c47e1d8046f90614af8480c7a9c2d6d306a593f7c9dd3d8228de163f1daa9aa35b843ea3f28cf620d6e08ce40d8092296ed36b7a045b10

  • SSDEEP

    768:GDOemgp+CLD0bKpDwOWvg+721nJYW5xaUjQH7/3SOAhbyhCXtI5mkj/Wh:MZd4bvjS1Vmr3SBhbyMXu5mXh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2defe2fe1803868a4d955d1b6ca33687

          SHA1

          e110ab47ed7c53cd6cf5425af1995ea5d2ada76d

          SHA256

          c4556b62415e4bbd1c4609edd197fbbf1d0d2c2068592646c78f6cd2c972d2df

          SHA512

          c306b3ee93bd0cb60b2689663f5a0135b7aa15f3ba3416809ae5fdcfe74403f11102d2f6f25e783aee964ad54e33e4fda19a34f5ca18abfe31dd6a8599e8faea