Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 20:45

General

  • Target

    fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf

  • Size

    90KB

  • MD5

    fd9c866461513cdc571c9b0ba242302b

  • SHA1

    dab6b5a1d520704d5fe58a6d86812df9d20d8cf0

  • SHA256

    b0b7481639e4e21508601fa8ae69a61603817cb7927b40b644215054013a0885

  • SHA512

    049733501bdf4641131b58ff05c7f5dba7a6f99ad4e10f879422d4232d67d687246ce71539df7943465c097a767177fef844bce9b5865bce8ae20de1b3aa7f4d

  • SSDEEP

    1536:a+fCdX0vKkvA3SxZRdSi6ow8jwNAhYgygKXqBaMRQsGUBxqPZkwJVWYpO2KyJlaB:NCdXZaAiFdSLow8kiByL6BdRQsHxe6ZV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          03e77784d48b5d1c39f6bd3522755047

          SHA1

          0c5243b70e2ae3f80c3daae59801ae2bc1dc5061

          SHA256

          a507cff10a30b8336353dbb372be6ad121aef762347ee4c31d275c18a2728673

          SHA512

          c156cf0f4a6362fab5a3d1b6800d3e09db93404050d5ec6f80720fb7a2a151fe4c618483f41343356422e7832e292122598382089a0bc5bf2b03929ea013d3a1