Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 17:24

General

  • Target

    ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    ffc9375f7edaa925b6576c8edf4ac6b7

  • SHA1

    b81cda53f48d54297a8cc17807f775a626ada936

  • SHA256

    aec25a5cc5990d03b935953cdec86eacd95c3f3c37d11b5daa6f6c90557d0ef9

  • SHA512

    cf77dfbd337faf0d9aad9280cce09db3e1ba494f825b7cab8bd3d547712b3fdd27a0e09879901d955d55a6c9cd0d32e5b07db376512aee0d9bcada42e5383a6b

  • SSDEEP

    1536:cE1ujXGT3Nzugo82oOa8pA6S0mJrOO1jEw9qw3fmq7WPRDQHtvqI4vbH5WwpOSsn:3Ej2zhZcaxXJByw9DPI2NSI4THwSC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3eaef457551fc2cbd06582e22f9730d2

    SHA1

    fbde81eebe49e7b414eeab3df35b1e98c8e4b996

    SHA256

    1a131738886cf9e6d4feff921be373c35ba55af1562df15740afdbbd77ded120

    SHA512

    8964ff6af0fbc0d44f2a05129fe48abc036c838b5d8a9ce1891e5827c7314a53e5de2c947a1b4094fc165fad2ae065db2b4b506f521ca2ab2079e722900de537