Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 08:50

General

  • Target

    101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf

  • Size

    50KB

  • MD5

    101ff3ae510358abdfd9096236e57398

  • SHA1

    e4820c8469f18d30d9496a92b9fe5ef04c711f25

  • SHA256

    eb8d08543e146bace0f210881427a5c60c1a64e71ddfbd09a13c8cc39da3abbb

  • SHA512

    37150e8234d246a9011a66abc51a0a34971bb4d2ad4d7f8bcc42359063909ce01f8d046c8b5bcb23aa52c83e149a8cb0d2bddbe7f1c2f4d6ce304c0b8a41f2cc

  • SSDEEP

    768:rgGzpDApNWxTrfV81t0ja5yVnoFRE3uGgQc+GPBzscQazAHlI3tOevdVWGTKF3mj:UGF0pCnoPEno+ZaElI3YeFD1jjTKNQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          368c96b93e7ed7e2debfc73ef9a59d32

          SHA1

          12e2c89c6fb214dfad592f86c0257a12049bd4ac

          SHA256

          1a1bdc3cce3f8ccc1833c8b362b250b368611acd7e1b3b1e8805f6f68881cadf

          SHA512

          825d6c9602a5789c09ced96e3da8becef75a0d228df2ba0fd86ad8dc3c607867f73fddb6ae50361e94cccf9d6afa4db39d33794abf990ba1bb8e7700cc9cb2bf