Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 07:18

General

  • Target

    f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f785e939adf59e722e9dc903589a86e5

  • SHA1

    1dacce1643230bc9e41c5ae4ba49ad2b044a1c86

  • SHA256

    39dab15398e4e841aa7aaf1f0963b316b052210ab0b9aed360450097c291f28d

  • SHA512

    6e302c9a2066730290106933e99a504f3fc3ea70d7ebac3874325db709741b162b681111dd354f1bcdf4e77a7415ea6cd4580bf97eecbfd6305576f46ee1e08b

  • SSDEEP

    1536:Tem8/d+ADS33fLBF3iUXsqlpPXoLgeWWNb2SihPWjWOpOaZQTqA+g:KmQAAW33DBF9cA9oLPshe0aZIqS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e359415efad32fbf0016e63a3cdedc22

          SHA1

          5878258df37bf96d3ffd512c9cf19a907b173a23

          SHA256

          331c1c0c8133bd5dc96ac2666c7a0ae261fba120eed46bd4b8cccf74e52851ea

          SHA512

          9bf6a48da6514346e4296f4cc4df45f5f97d05a74e014081a43098d63956832367fbbfdf009c3286d378708894dd0463713d1acdf2d14f208111a88fcab89b50