Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 12:28

General

  • Target

    ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    ff46a1f251e2bec1cb85675275d0f5f3

  • SHA1

    76789799d8df3ade46ba12f18e283d6c8b4c8da1

  • SHA256

    67a40887f2a502501dced68cf5602a5b2baa8a0cee977d5604aedf04801d6c47

  • SHA512

    e21c3d7ba6dcd8c1ab28e86d31d9fb6a2d6d8e97cec117a14ddfb74da2a683c28ddf94f9e506ddf5ac0b9db8d1723709fd0fb1b56da1fc82fa7b87bc9116feb2

  • SSDEEP

    1536:qwAg81548rQI5VrVX4uyOynWPNP9/V9LwcM6EWQIB7oo55sBH/WUpO7Diw:Nwa8D3r6uyRniNF/nvMoL5qHS7R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b4358f333523e3c4fb41fc06c3ebfb36

          SHA1

          a215b04304c25d551250425616a0c8315d69d91e

          SHA256

          7aa3b09e955e93a532f6bb68783e5e53597442adc523f6b73a3ccb86a3974a71

          SHA512

          1c2d1e012c7eb1931827200c75920cd111083914adae3732dc1ba9aa973cb2941378938e0ce53e4d35340229939777098a2860ecd5333bfb7bbdbfdc6889026d