Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28-04-2024 09:56

General

  • Target

    04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    04ee4f4d8433a8b97e6376965b372735

  • SHA1

    c2279336720e25287367443aa05acb899c41cf8e

  • SHA256

    d3781ba2175f7c7a57a0ba7b078c5d7515f66d82cf83a87761aa27378fac9690

  • SHA512

    3e230697ba65f48d1ddc2cb0c0229313397f9164583208512936cc8024116aaf380cea5605e0e1b8cf7d0285b7dd711c8d46bc3cadfbd6be41633a83904c4013

  • SSDEEP

    1536:KXFZmGWSig14ee7ncSA6pJ0TUzncKYLweQXRRQbWcqe0mFmtT1GAdWXxyl8kS2IB:Aysig1zeDc5K31g/otYAjl8N2ImArrcM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d7de406186de891dbdd4a24089eabec7

    SHA1

    093200d7e7288b66ff2b3f6c359c9fe707a58a3f

    SHA256

    7d46e7758cc005e710c8eef5f2e271458f80b7ddcadadb7be2787fb6834086df

    SHA512

    33971eca0b5cd214b554194b2eac995cb25d18641eef9b9ea0105c5e1a34a0bdb14ae7d27692a036c81e0779692b662a671bdfb09a6968208659c4884e7d4fcb