Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 15:02

General

  • Target

    f60b767de172fc9b50d2f5fdd0c0e3f6_JaffaCakes118.pdf

  • Size

    94KB

  • MD5

    f60b767de172fc9b50d2f5fdd0c0e3f6

  • SHA1

    5641001e20e3e9398aa843cea8a71448e736dc1a

  • SHA256

    e5a466f82acf9e2cf48e7f271df9110d98ca869c07de4f24f464bc02e83c3a6d

  • SHA512

    4f15a0088b928781aa12f2f152d096ba5e00f0f0e41974e062bfca46961e0de0b9e85e39d3313cd9ff3e4c8c0c3ef8c8517c6e5dcc33543cc02ed2964e1dcc06

  • SSDEEP

    1536:qJT6vT+AnbGqcMHZKlxweqrvC6zb/yhme5mxc+UvEuAWHpOvdVf6W0o9ZSYfr6BK:GCTtnbncMHZKlxw1vC63+D5muIbvdVfx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f60b767de172fc9b50d2f5fdd0c0e3f6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          383f40daea531f0994c0f9fff85988fb

          SHA1

          759e7302f7fe05393033491441c8c46d306e2531

          SHA256

          c3c89ea3a58385393bba862e8b8c56842b5c2867f61e01a6942eda80c8553290

          SHA512

          c3707313c810501d933287a99b155e04f548ee3632d8297dfd54777846c4339fc79e62164ce6deed69b1d1ea791fec703248fd4345b615d2551a55c603215e47