Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-04-2024 06:36

General

  • Target

    f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    f9b7a90662c9ce599c00e950eb03c6f1

  • SHA1

    9ccf652b7962b167c99f691731220655ea7a2062

  • SHA256

    afc98ee78eb3a0e9b54da63f72afd66dbdbc449a0ef5381fbfffa71d92e05a7a

  • SHA512

    ea6773067999bdac67a45a31d04d5dac0c1dcd1136e156469497d18e76cb9708d9414daee76ad509d4f92e6efcee097394096a9bfabd8361e5906157340bdeb2

  • SSDEEP

    1536:2x/BJ/PeErqyvVZSQdr4aJJr/fPEJJkULrK4rxtoAQa0vGVF2RhyFitx:Oz/WE7nZ8JJkwrAAQa0vGVFyoFu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    64e80dbb6ec240f8f9041ebd97d673e7

    SHA1

    d59b867333255fa918bfccc11256031694e5190e

    SHA256

    dec51e95a7f99dbcd71a8d8ff0d923ebbaafda97afcf041c1e7c5b35f22b81c5

    SHA512

    2538bbd7ae41bcf5267281811035be14a1c360e3618b9769f45b719711aa64981f5835a18469a3ec4f3a7e685872360f372a494e5650fd934599c330d9064add