Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 15:39

General

  • Target

    ff9c7d4c80c31535dbd041477e72adc9_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    ff9c7d4c80c31535dbd041477e72adc9

  • SHA1

    8e239cd5c0d529021b327ad5c1396c57fcde5647

  • SHA256

    11e422e6810041ff37c7f3bf0c3bfabf20b53002ebb83c3ebbfc6f3bbc4e3ee8

  • SHA512

    58362cef3f4d7efb235222ce42ff4a27018e66c06e307e90453364d458eff8a400316d5c429026f0786aaa8f0790e64d97b7647dcf1c185627bf4c572c86ba3e

  • SSDEEP

    768:GXJgbRp6vmeG6EPxRVnYe8dVHuBA3vdXJ8GQ7kTO59ITlW:gJREZPYVF3FI7kplW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff9c7d4c80c31535dbd041477e72adc9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ca7de593fbb7a7ba48f30718ab9533d7

          SHA1

          368f3c6078f405fa3ae769e2e488582670356118

          SHA256

          cc74d929636e737e3a99de80a88c5d4ec91fdf1c6c8f90df506dff452e6476d4

          SHA512

          64a4a7539e92823c1b58fe6c6a7659860ba42ef7e6cbd6bbb9b9eb38ce0750341e36799ad735b2949e418bc825605e9989f4c3bf32b394d70dea6f851aa6f228