Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 11:13

General

  • Target

    00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    00a3cbc1266c7ecba9a05ff8ba0449f0

  • SHA1

    13191dc0e59e3fe3626f9fd36d2f6037b52376c5

  • SHA256

    6040996da87e9043851468be100e2951c64665950c521a6e87555588466b04c4

  • SHA512

    e5af9c26f8483940b2bfba561eb96330d0fe2759b84df119369e52afa25735cc863dcc3ed3fa028ff623218fbd2f448d347b625a00ff78083df7839f04b538ea

  • SSDEEP

    768:u7gGzpDCp+qxLMoQTZ9wApiN02T/HDsqYgoie7XNo9Ya18k0auOGNxqe6:XGFep62rHBYFie7XNA18muJrqe6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ccc0c757b450d93063c15445339380aa

    SHA1

    1e0365b670f9a5908c7ef0a0af5b383e10157904

    SHA256

    4ca5ce1ad9d6827f58851fedb1b1d91bf48388f2099a9d2464a17d1c870b1d6a

    SHA512

    7e8a986a16976e89d2e7f5bd994cf74c31479f010455ef2956533491f475616f6a2e75e7b46965fc660f5e6a19379a676f9a368722f880446b00a20aa7ca2a0a