Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 22:42

General

  • Target

    4d5f5f4f60d116f1285de75ab74a9186_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    4d5f5f4f60d116f1285de75ab74a9186

  • SHA1

    303619005ae24b8073ca1a6a7a66740ffbdbb143

  • SHA256

    a1d992531238a46cbf311426120b982873b62a82b18713a952e8efaec20aa1b3

  • SHA512

    745c4364719a5e1f9c14e6f150cb549983f61c9da5ebe2f242eb5db467feec12ee8ae14cf3e6d20626ee6ccfd0a7b911cee13e11dc8971b0add295241d81af02

  • SSDEEP

    768:wNXr2+LD13QwCa+qNPm1sHD7L0NDvoJpyq3g179PKnqiUqvhQoXgzhE5nXuMZmwQ:wN3V+qVm127wNDvoLyq3g179PKnqiUqS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d5f5f4f60d116f1285de75ab74a9186_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f540c0603d6b577807bbde54eced460c

    SHA1

    4f20789ea5a300a71b697804255c7e9a80981cf3

    SHA256

    f16aa8803a534015a729ec6c230f69e2cf8f70cea7a4af92fe6e25d6c0425737

    SHA512

    e60f55ca16821c0d92fe167284b25a53abf9237e3c2095f3a7cbf028d76f9e839e615ed379ba895998859d38acff80ed432b7269bfb35cae155fd85d55daf760