Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 02:16

General

  • Target

    22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf

  • Size

    185KB

  • MD5

    22c56ab755c40e9627d77b4c62b6876b

  • SHA1

    1da70a6ac9e281af9294f55812c7915eae0ea429

  • SHA256

    9221924f0115b3d1bd854bd7eb3524bb3f43d67a1923f5a5f7eac141d8176895

  • SHA512

    0d69a02fa297d94081e44e0ffc6a2762260f02974df4184d6e73de4a418158eb7eeb9f3d65b6a15d6d38825ecfd3221f2517eaa6ad0f6128fdf5a1d70d8c9cc4

  • SSDEEP

    3072:12irbxzGAFYDMxud7fKg3dXVmbOn5u66KjnxDiwGpgluxiafY61ZUbHPSX:12MKlWQ7Sg3d4bOLP3YsaAjb+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2892

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b4e8effac114e5fe11b4242d1a1d9f96

          SHA1

          2a6080cf3cff5f2fe8963a8ff7299abab70ac2fb

          SHA256

          3284339b09fcaa5b602d13a6c72c37f39013d8fd9f64c10f41837032d57b2310

          SHA512

          320cb13db4ff5e83b29add6b844df1a538cd24a013344f4f6c067ae02daa90162b37a1096f42f8436c4494445c91bf4e02b631cfa9e8d465025661e3b678508f