Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 14:04

General

  • Target

    ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf

  • Size

    93KB

  • MD5

    ff71d26fb9066e86a795c0f97f7f4a60

  • SHA1

    26163ab2d49ef04a65f9fd9a0a70a94796b9f003

  • SHA256

    9c30a6a93c21b3bdd1249a77c4d8690af1fc64af1e0be91e5f04d44f71687cda

  • SHA512

    613f07778a9bf8edeba784098bdce078b764ef43752bdb2b12406d13e2cf4294f87be2afecb80f61df9f91397b3bd2e06f5054fce6e14aa9d293eb2d5fa63fef

  • SSDEEP

    1536:kbUUMbL8lM5YI76hueAxWCkV985yFyZk5pnG6vLYZowA0yuLUWgfM+asCCWUpO7o:cUUM8K57WkeAxOuyFZpSTA0LeasC97YZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1e809834923d50f10317aadbe490e61c

          SHA1

          f1a0385da427c1a51d1234af0a1031968443b907

          SHA256

          27351ed057882c0b2796b9ff591cd5fdcebb432dd529377eeb28bcfe057c004e

          SHA512

          01983fe7d7bb4fbba8593cb4679ef2eb8cd0e5acb7b54abc8690da7df5ca97bb037b7921f31c95da02b6c90b8a229c1f6fe38925aa0f68d443d1ebac5f5188f4