Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 00:52

General

  • Target

    153e573d27c7a01ad26051bdb62cbc36_JaffaCakes118.pdf

  • Size

    184KB

  • MD5

    153e573d27c7a01ad26051bdb62cbc36

  • SHA1

    a6261f2c497de1bcb80d578258e5c92fc33a6e31

  • SHA256

    fc4ad2987d992c497358d786ab54dd79e87a4a1be4e4836cd6973d7bcd0ad380

  • SHA512

    534718755b49acaa2a212d539f1c6eeb8a3a28c06d97f89d1edf3061bf7f1fc8b8ce93de533bcfaeb2634aa4397e58f318d034dccefbb5c3c5e24dab9ef79512

  • SSDEEP

    3072:K2irbxzGAFYDMxud7fKg3dXVmbOn5uQ6KjnnQzzpsB2dlbu3SXkyuyau3SK:K2MKlWQ7Sg3d4bOBQzWB0iZU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\153e573d27c7a01ad26051bdb62cbc36_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a1387746900784c5e7b7aaea5d76ac3c

          SHA1

          65300b0d73b805acca84269dbc206baf825dde72

          SHA256

          69ce508892ac91ecd660c0ef8958a0a974b1888a4e13ba3ae193fd2d75999655

          SHA512

          a03172ce03cde302d24272e1547192663347c31a74933c853c4c261a82665a947de3c87baabe0182ed14686b7d0c13badd73c06a4b50df2345e114593f359b61