Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 06:54

General

  • Target

    fc2e1757dbb7c66b09db305b3bac2bee_JaffaCakes118.pdf

  • Size

    255KB

  • MD5

    fc2e1757dbb7c66b09db305b3bac2bee

  • SHA1

    1f4c68f8a9f0d90b20513f4fc689d3e5292de3dc

  • SHA256

    32c5eb203c675e412785bd5a088c07c7f91abc01ed2e7c556f52cc5b7a217400

  • SHA512

    cf993b0010bc0579d49dd4d90d3281d29e2a7c9f66ee6f753a00fc7cffc11052e3590fb4daf45adcae3d6e4ae1e0f488e9be9661774bdda2c93ea55e889ae6ba

  • SSDEEP

    6144:qrCXvGqeYvCQnYimNhk1InJtiNmDmPoZj4J3L:quOqespny3vUCc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc2e1757dbb7c66b09db305b3bac2bee_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1b519e43c82d56cf1b5fac1652e8d707

    SHA1

    9985ede9bc132276a1b3a7e818f1e90305f141c1

    SHA256

    270c76376fae694218ee9fad27a2bd8dc7dfa8294e569fa2b1392e88bac42116

    SHA512

    61a466cd79990c504c415c30ca6f57a6bf3c3362b2a597724cd38137c71a9526769749abb2ff959af2c9d2c6eb2584579e26a03089a85e4de6d3a3f873b91e18