Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 03:51

General

  • Target

    f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    f97143f5ce83592e93d3b0a84c314b66

  • SHA1

    7e345925aaa9f6b3202b232272cb4ef21bb47b2a

  • SHA256

    4b7b75b300d3355a404e3c0e4b8d3fb21a2737d7681c26dc274c547e5eff1ba7

  • SHA512

    7434d27e730ab3b9f2ebd47ac338df2a3b11584b55e9f5ab68b37f0d8c990f5d193dd2b2377b844e43aa6113810017666be51b7cc2109a6651521608522b8bb1

  • SSDEEP

    1536:Jd/kn5aqaQJsMQzDDBriwzolrAnrS91gvVlAjPv7BfykigHWpikHm1CDQYQCQ+E/:I4qaQ6MQznBriwMB9CCzvYcHZamU3VQN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          98392880fa93f80d07c7d573b0a4008d

          SHA1

          881876ffaddb4f3f7d15363444aba988a4009190

          SHA256

          b226137dbfe616ff9f124470fdd402dacc63ffd3146bf0a4ae08a3494f290a12

          SHA512

          ffc806690d69419df6385e298d7aeb09b48cbe054b8a6ff06fa16d468fef82126f3919b62c57052c20ac615bc904267f44b757b745984eef123ba4af47fead14