Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 19:37

General

  • Target

    f89ffc019b9c9548c7b04c4c34f1ab8b_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f89ffc019b9c9548c7b04c4c34f1ab8b

  • SHA1

    32c0398e46457e82e3d906cc0a09c598afd645a3

  • SHA256

    9c2ffedc39a1737ab06f71d647d8bae967d3b41dd1158ba29f8ed8be1680571a

  • SHA512

    aed6070c39ceb2138ae3f6122e3d25c7a535e65e27df5e632a1062b4c09589b7c484700a9a727110666b22e6bcd995e8170d55933aeec4985393fc29b581f032

  • SSDEEP

    1536:1t2z9n+ah8LkDshvUe4GA2vxwer4T/jYWj6TyoTNWxATqdJhW+W8pO+1KOH2KWP:bWnT8LkSvkqcT//SqATyDWZ+hH2D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f89ffc019b9c9548c7b04c4c34f1ab8b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b3754ec387b91333bf7ad4b54de1b8c0

          SHA1

          f5eb321151c00ae67c4aba7a0311430a7acdfa87

          SHA256

          1933e2e141a6d79424b1d71e5c3f8316fedbd34d2ea70fbf36876be06946d4c4

          SHA512

          c89dfc54b5df8afecb45efb74ecd9f531bd17f9f0e1a015f3a91e04be135f72c399984ea02649cc79cbfe1fef9818dcd01ecf55f6c1723950305075f9f8c8c33