Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 16:31

General

  • Target

    059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf

  • Size

    54KB

  • MD5

    059c0735c4d9d667475595b2f277ba3d

  • SHA1

    8bed5d853eddf67cdc67c6375cc6fafc721af3bb

  • SHA256

    2800cee116f52fc08e521502dbc88b2c4857430efde118b910089d8962744de1

  • SHA512

    62cdb95443d17fa754cdc97a8c8051e92d5cb4b93090752373e1d9d8a99f6e853a6ee9d0a07b6c1206d9ffef4d294a627ca83ae01b44f22a3b63154882c3bbeb

  • SSDEEP

    1536:uXFZmGWSPQE/6iXsabG8d3aw9XkwWzoVPH6DZt:kysPx6iXfl903ziy3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    022abc4331a6ab81b96fd124ad952a94

    SHA1

    53f9a2970d913d1e1054e4ef847b603c939ce8bd

    SHA256

    4271022c216b9d00f0e94d584003c0dd7d9aa582e871f51db73488203cece13f

    SHA512

    288b291b94e9c7897d8cb581bd991ca0098160de3928d2045c876840e934d1cbe046530fcb41b01a097956aa65d31dbd25c94b46b38180be9c137f9517631b89