Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 00:30

General

  • Target

    f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    f91a062453358d4bc372ed812198f189

  • SHA1

    814521b414cf021c227505ea2f864e093d299717

  • SHA256

    bd8cec527b31ea00acbe046338e2001d4df159192baea880b6e0451931ea2445

  • SHA512

    223d814b598104b26f450f9ff5a6a44c13c7592f280b46e2b9a804b017828fe6bb09e16cf4b46a2c1c87154c091a617c27e48afaa19efa6e62feb828031cbd7f

  • SSDEEP

    768:dgGzpDz7rd+Rppxa973jT5k5m1cN18uzmK7E3SsbQgJf:eGFfn3jdqL8uzdObQgJf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a4cdb9cdbec5781de2fd4ca4e8151e10

    SHA1

    f2a851df73f209227e9cebe0e17efee961cca8f7

    SHA256

    be21bbecd46e958f1fb354881407124cd4e6771f8c33039060963ca0d23a3739

    SHA512

    6673ad617dda4f93f45d32357c56bbda4bdbed5566e7758d8b6ca9bf4767459dd186f6a46c284a379b083a5f31837d9cb8183ff40074a4c369517b74b0fdbead