Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 03:09

General

  • Target

    fe4996a08e919ecfae434ef9b5b12cca_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    fe4996a08e919ecfae434ef9b5b12cca

  • SHA1

    912a1568b80433bdbc7c5f210647086d8030c79d

  • SHA256

    d745864616e2596c7bbff63ee5b688277d361c5866b378fd56a0b1b27a48c8db

  • SHA512

    97a6fb2a05b73f6c939f90a4f1f87d9aeb35c564caaa59c702976357221a621501df373cb72855703c41746ed0ede679cd51579ff0a1740aa6cf03ff32b9eedd

  • SSDEEP

    1536:mbaVMUnET5AfZ1q/tuTvrj3UNk6ogCxFWxApOGzWaDzPs7X9zwt26l9O:XMUnET5gQgXSk60xC3GRzyzwt26y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe4996a08e919ecfae434ef9b5b12cca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a8fd83b313d089431673058abab88614

          SHA1

          267625237a9827c6e992e6fb6f176a568fa759d3

          SHA256

          caa645d592a353e7027af313ecb78611ed5ea65cb6d9600a052ee8fd45df191a

          SHA512

          8b61c580d1135038ac3ab7e2cd0e03fa73546dcb7a4d4e651e34153cb5e69ad60cedded15e4eaa73268b025504bc671ff580946acb691c2ae1214f7be3c1d1a4