Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-04-2024 22:09

General

  • Target

    03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    03bc87041391046d3ac60a48bd39da63

  • SHA1

    b8d0c5082482537eba1dc5f9134ff30f5e51a130

  • SHA256

    67ec4065d84ff93f140648a4e907392f0329887ef6bc3b28ae05919ddcc28804

  • SHA512

    3c4a5f480b15a254c40d9a71aada5a04970f03045e90a99f355eef18c3efcfdead29910a7daeb133a8da06579272c2a4bbf2f894da799d82cf15059eaf39993b

  • SSDEEP

    768:8XuMZmwgCLWarCJz1p9DNaZkWOupQE0fN5m+qVLMrZGLjdJcwiUp3Rk8dN:8XFZmGWSSz/lNanTQEAN5m+qVLMrctJb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7b2f74ff06adc3c588749edc369b2d06

    SHA1

    013a4fc0f32bab55869af0ebaa6350881c04bec2

    SHA256

    e797ba411924135f082a11b204997e6827cfe4a8856a5fd3dd263938f6aaf192

    SHA512

    33be444ae901c92490cf5479eedc215243693f6432adecd7694d4be9b405b93712b27a444426066de7327c5cc1cc0a35f7b04c2e7dbc6b5312ff7e33e9f24d85