Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 01:14

General

  • Target

    021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    021355deb962d025c66059f2d68e5e37

  • SHA1

    3b272766aca2bf42f72aff011169a4312bab599f

  • SHA256

    33f7331f08d92e35128971b6a4ec78a16f8217756826474e542a9618b03c40d1

  • SHA512

    5d35637e0801406494a8d70c50216eb1ad64522dd108d721d152d75248740c4db8752352e783fdeb5282861144d4987a15422354688b47af73c80ddffe2e4d99

  • SSDEEP

    768:KgGzpD2bqqWc2GnyNs0CvWt2ERU/8nSf3L49NxgRwGQThPNbGgmtn2CVWKkXFT:XGFCbqhRW8SvcPfZTfXmtn2g1kXFT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1760

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c4c77381641f38d0206bcd20d07581a4

          SHA1

          ce6615f07cd4d6e980a92473262fc7650929e52c

          SHA256

          87e9dd84331fb021eeec640ee3b3ee544e778e7556a46f7547ce335221cb210d

          SHA512

          76791c9d08774c4329fb48745267883ec5c9ee9711d9ffc882db6f9d4cc5f00fa38c16ea09627544eaa3c90c34b2d68f85a10c01aa4f43cef76b38c23fe17389