Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 19:21

General

  • Target

    4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    4cad6c21b6c7b28fde8af7b702f2a8af

  • SHA1

    4bec2f314ecc9672bd0b51f08ebad9c4ab7a171c

  • SHA256

    45780bf0691e7a3b6db0fbb69ff74522add08ff0856724572d2fd4a78909f35f

  • SHA512

    34add24314698e5001dce5e9e63e933f93b5a5c8dbde0905e4998af25e947a4e071dc31c8b5eb2d2503aa0692d6bd4c16ae1d92afa5b56aa70454a02a8c98ea6

  • SSDEEP

    192:tA+qjM40WVljm5ehR+cf1Q4JG3vD1uaH+VBB:2+4MCecNzgTHEBB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c2e2f586f0eb52cda69aa9319e45cda2

    SHA1

    581b22baf5303a86ef1b39153ef47f18ce39b1ec

    SHA256

    05b04d1e47ff171a538969deb4387f3586dd08055f935313c0f6317a74adc1d7

    SHA512

    63f17bc6d02b4cc2bf49a079972bb2c513fe7c552d76e78caeb4614db91efaf273c33be391033364dc7c0b9404be962f936f118be216be1ed44277eb995458c3