Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 15:01

General

  • Target

    fa8e6462ab0b24efca4eafa8f372f72c_JaffaCakes118.pdf

  • Size

    103KB

  • MD5

    fa8e6462ab0b24efca4eafa8f372f72c

  • SHA1

    2e7394a2015fd9b55a77790abda1678410ddf4ef

  • SHA256

    167cff5bcb3b49cd91bd38c4a1f7605f18d6daa13ad185cbb72d266d9848a0d2

  • SHA512

    32e8b349472bda8cb2c1d70b8db5db649f019b55af2745f409c80cc31cb820173b47fbc8a8c3ccae1ea21bca3cd0c6f94243f5b45adc962fcbdfe53a3ce2ef5b

  • SSDEEP

    1536:1+cI3WEQS7imfjxPppHcMpuHneeIh96tXNYMEt8wOjsW8pOGXnghIWPhzVHFGw29:Urh7igxP/vpUOWUGvGXghfhxlGP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fa8e6462ab0b24efca4eafa8f372f72c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f2438a384ed07de9ccd04117dc55f7db

          SHA1

          3f22018e13cffba90a44577c0b23b55ccf1eff0a

          SHA256

          218e87f8c8604a7f49c250bbead3a625c5111813476bbaea97c6366dfa1fd7ea

          SHA512

          e444e780f8e2f08329ad96a581c3997dc1d59e936e0d562176358923e9c515c6784a73ed4ee3e303ba6e35b3020439db913292b4f7c2b861bf76e2f69115e8c8