Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 20:49

General

  • Target

    fd9e696092e9f22eefaced3b875b8d6d_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    fd9e696092e9f22eefaced3b875b8d6d

  • SHA1

    45c8df074ea84631e57bd69599cf125e4f475c8f

  • SHA256

    20cbae7b7b198543d6bae1c98b8be94a1546dce294befbb1811dda84eb782f46

  • SHA512

    1596b5e940dd82d224ab2f261116136141f8e6d7a6a7f8436fe55a9b67a3b481e04c29ca3e07987ac2149a6fd576251421a4a97a1fe609074a9581366da1af89

  • SSDEEP

    1536:hdQZgYgGDIiydCGDpk7jo89CYm65mbseW2HW4+6W8pO79RL:kqKDgdCM6jz9CYm+xEB+B77

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd9e696092e9f22eefaced3b875b8d6d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1980372c3c6b45201a3a0a3e6c576358

          SHA1

          3e7e1eca957a1b2b29cbb7382574309b0f98c047

          SHA256

          93605cc3d3404b6e3b369cf3687bfca4219c39876a9f06097b84bf1973ec1bda

          SHA512

          6c7aca4ea0422d3fc1972e4c7e9bce0c43264614ed7ea6a56e4305dca027f5c670a0f333b98d73c67c906b749abf946cd987307e62ca4fdd5326aee0ffeb9dac