Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 07:06

General

  • Target

    119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    119cf97b69aa55c617c8a0cd37ac8608

  • SHA1

    127479b7f927e9f536e82059269cd3bc3b9350a9

  • SHA256

    21a6c141754b702a032a5ac7725dbda08daaf18d80ce28576635da4e2c678501

  • SHA512

    fdfdfe102e2579e8904abc9f4f804c629fabedf2ed3bcfbc088cd6c2552ad38eaa476fe912d2bd9f577eca53b396a7e0597dfacdd9916576f3682eff212ac38a

  • SSDEEP

    768:vU7gDUVI4yyf1mFuxDQBalFn27d5shgvNBryXD1wpIApJwWE59XuMZmwgCLWarMO:c7oUG4yyf1mFuxDQBalFn27dahgCTOIz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a178f1ab4c6b75bdedee0f67c9d23d35

          SHA1

          a20dc3bf7c140e40e108b9d4f391ce98a8662ad0

          SHA256

          b85b8e5965733c0ec243cf49b94498847987581c1b62d52babf3c8a57c65599c

          SHA512

          f442cf59f6d2687a6203f07942eba4af10d4971138fe4311c911707c6aa1f68c560f9094db61095d443fe1fd620bb698a74c9c12b1247881b91056fd8fbe15ba