Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 05:06

General

  • Target

    09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    09168fe56f1643aa3687096c77967bc5

  • SHA1

    cccafbdc158d79142e4c01ef6a8fcee2e267b6e6

  • SHA256

    649dd8796186f5b9b2707603d8ae6939552e1d4f648c9772340f7b5b09135c81

  • SHA512

    1bef4d6ed5ae18dd1697dac85c1e1dbfa781599184eb605fb0cca0bae912cbeadbe8d40db6bc4876c798ef4b1daf09f893b11534e36409800354d7fbc8376ae6

  • SSDEEP

    768:OIjZlleqB9vvPmOzeIhE2N1iaVVVDic1VQPxfViEGAmJuGDQceE5NXuMZmwgCLWD:ddzPTzhE2N1isVVDic1VQPxfViEGAmJ8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ecbc95f2d29aa39f17b5f3d8c26e83f7

          SHA1

          807201a1caa369cfbf27d512d6b3dd45910ebd97

          SHA256

          a49eab1e153c820277e3ca92359b01283a6360fdef4f3405af7851c485e596b2

          SHA512

          de9a29378f4ffbeb9209b6fd4a13fa27ff499c7add2ae150cd89e6eeabb1dad13b983ee66ba07787528ce95795acc4286fc26c4b2697d74c8726980957d4f37d