Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-04-2024 22:08

General

  • Target

    03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    03bbe33ee69c45493101c1ff3b32f502

  • SHA1

    12a8da7d4030afac999fcca495e83a00b7f37460

  • SHA256

    9863f298210b9b278e347c9b0e3a30e3300e0276daa65462d62b45274d754898

  • SHA512

    4a537c9bae34d88e529b23300b683e1d7a01f271b69bbfbc79dd4a33325e2f13e750b214d44af148f38fda33b444393c698f32c953b179902cc699671c64e34a

  • SSDEEP

    768:icf8EMWgVvAfC0dMaNCS+p9dSJiyZ141shw2N1CaVe/V9iy1LPLVQGZm1uRDQHav:icr2vUC0yG+p9Opy1shw2N1Cse/V9iyd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7bb661536ac380d74ac73a44cd0b1e6a

    SHA1

    c6f272bf4eb5338d75a986ad38d5bb2041e8774d

    SHA256

    b4541a4d8dd34422dc64fed51709e70c6103f8025db0dcd10f32ba39ae407aa5

    SHA512

    74ce5bcfce2b7bc3717abcf840f3b2e059c043e51378ab1600fbe6a23db4e5f16c0c439fedd051fed446d93efe572f1467ce191ac7e3f3163f54841c8bd2a943