Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 23:34

General

  • Target

    fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    fde8d2ba99b5ee2a357b3aea22b8e4d2

  • SHA1

    611b13757bdf92e07b654832efe8792c09c9c135

  • SHA256

    50e742a0735f24a0125202b5363dda37f108dc7960a0e44f1ef8a526899672e6

  • SHA512

    a149122a761073eee4f4742b72280841b3551a03127aafa75046047ef3ee0c10f659a199f77c6a38472c7665caddfeb9f77f9196cc3b910a1fc33ca9d92f0495

  • SSDEEP

    768:Q2Y403GsNDM2s9T5uxPyTQB/nKIFlIYwUKp1vK:pYrZDMtHmy0NK8I/xLvK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          37d1b1a0c2b3539aef8172423c1e709f

          SHA1

          4129c2862cb1a45383768913f8d9394f64235b12

          SHA256

          69a251e7a71eb743ef89e9da84eed6f6afd1e59e662fd7f82001838244be819a

          SHA512

          a23f5cfd1d3c599c841fad44d44de301a0f93bd7c23edbc367878d3389667adc9211e89843d208daa47be372fa3d1ce65611df5ce2faebd3bf03218b0c532ad2