Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 23:50

General

  • Target

    fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    fdf0b43f912a887ab59918824d520e66

  • SHA1

    022d8275d28b46a12e16910b185199136542a513

  • SHA256

    f0d82ee647a39cfb793e0e50e3e029128cac885a0adee47755692aea037ce257

  • SHA512

    477c2f93d12e313e8fbb3da03b05d32a50f982732ed6cbb3f289b7de61202104c5001f3bc7cfc46ca4cc9ed31fdb653f82fe597bf37f0bb4e47c2d38d4d678e0

  • SSDEEP

    1536:TRLzDCRc2Ges+Y6V/LCDzWUCqVop0+NF4NW6pOu26WUXrrl4k1:VL/CiRyUqtNHgeu2uj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b7f189ba48944a8737291dad0a3dd4c5

          SHA1

          68a9c7c148ffd13fa26f387deb75bfec51a8def1

          SHA256

          f6ead940c2b33f03d8c3bfdaf988e4d51a8a71b5fc0af8077fdb66eb473e6ced

          SHA512

          47c0113f48451504d16a15cca662f7dbc12aab72bcaa3f3c9bf9d9b18c444ff27a3dc367467409d5097d256dfd7b5928490d20b7e2608c8bcde81b4d8881465f