Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 13:06

General

  • Target

    fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    fcd3b15f3e4f02c4b1d8728489dff32a

  • SHA1

    10255946a5570961c8d5cf258864e249ebbff2b1

  • SHA256

    d1daeac8d96492a6fb2c5ae4ed9cbd04825d8f6ac5940db763e4be4b966ac509

  • SHA512

    b0cfdec21a2052a746aff1cc59eb1ae8f8f58fb95f2d6d0f4c63dc19d8d4dd2fb02bc525acebfba7432f995c54b3b867e7e1cdcd48a0c934bf3f9f86a398d2de

  • SSDEEP

    1536:52lvVg6xNIeTBveKvOnrI/uw8mumKMnAqU2cYCqLUR5oyWV/XY2IjOz:5Whx7krI/huQnetnCyWVQ2Ii

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2f75f5488c851276074eea84a566bc08

    SHA1

    6935c4832759b89a07d89a815075264a6db0a795

    SHA256

    11a1e3ab85e6bb43ede42dea275554e23d65d40d1059c452c5a068ed62465334

    SHA512

    3a29e0d304b97d9602bb243542fc784bba1e1ac9b542be023cb0500b80778032c29a2f317e9b47c1942277b21c91155aa8ec10963481b280a80cfbf7c93d5f79