Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 18:58

General

  • Target

    4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    4c94121275896b6d921bacf0ae94c9f7

  • SHA1

    1fa9bf7edd0475062094e379a43b79105df34b9a

  • SHA256

    784de6ea375c48bcd20fd561faddc7fcc3d5e8ca8232752e39c346d20e3343c6

  • SHA512

    1e3e0baafaf000b890d544bb03ca81837ef847a0fe91b0af07350fe8b05799b76e6c6dbe86d55c36e2d321d4202a7de72ba33c129f1f288d4f42ab9593ff1d03

  • SSDEEP

    768:VgGzpDAp9JXYxOgv5Wrirs53eYvxlJX7H0cpAAsG/NPVbIuZUg:GGFspw09XLjAAFFuuZUg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eed8028ff9103d798c70b5b50c547ed9

          SHA1

          76617eaa7259b5e82ee5f8eaf86bbc36317e45db

          SHA256

          8ed169a4dd1ec989682136a387dfa68facd8c064a9db5d182ec68b83288106a3

          SHA512

          64171251a15150cb23b663c3e3fb02e904e5b5c7d7c77a170c274e38efd1de1ed38dfb95473168f6785d9a0a1d3b86d7f09fbfdd46b5acf1ebf48501d5142fbf