Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 09:03

General

  • Target

    4a54ce3d73d8c30866d2eddd6b52312d_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    4a54ce3d73d8c30866d2eddd6b52312d

  • SHA1

    28fa9707c5e84ea0984fe9c81690944f46d0059c

  • SHA256

    e9b0509a3129ac1e9685686d6be7b209bbea2fe4f2d656aedd1b66b49719fdb6

  • SHA512

    1228db53b2fac77a5d139e3cf539018b3e5bcff20d260a8083ab40dd28646526255b8e9675ddb08660cf58c29c730e5bdb98c47adf2f53c51a1f255cdba9d7ed

  • SSDEEP

    768:rgGzpD/pWpDPdfelzvqAUWMafhu1zwe2t+DLud5Mez1IR09rVMitdDDOT95dT1mZ:UGFDpWaNo+TMv05VtdcHdT1mZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a54ce3d73d8c30866d2eddd6b52312d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          035d716e82566bf5af2ba26eb1e17b39

          SHA1

          19d9b3cc8a1e0ad7e1952b0919c946e718eb04a9

          SHA256

          066b2abd79b011376c1f019660e122a9d3ae844a281d640153c92959bad0695f

          SHA512

          2b323ed1a0e6bae244eeb3e73e04deb68c5745f4ed5ac4dff27c55b13a82561925416d271ce383fe075b0c4e11c542e927efd3b33ef316257e991e5e08193bc3