Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 19:41

General

  • Target

    4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    4cbe48887d2dfbd0c1f9f5447a7e4139

  • SHA1

    33748a5c8058b08a286361394f15a3e1d5b58427

  • SHA256

    94d0ded9076995dd15898d9eb4a24a984bae6a5dd269c3bca0d51c8ba44602d4

  • SHA512

    4b45ae403da42ed45472882d74bcbac688ca68e64de03b06c14be9b4dd357ff09658c742895204a0bdb83725d5b0f937bd2cf16c42131c864953c379fe177b22

  • SSDEEP

    768:DXuMZmwgCLWargE5HpxoeEjkTklIVBeGrw8EsZ39LOqajQ1/+vv4UR59pJC2:DXFZmGWSJjoeEjkTklIVQGrw8Es3VaEo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0dcae7463e623f33a58192788c698b07

          SHA1

          1546ba3e7f60ece149e8c2df6f14d1266d512b99

          SHA256

          ddf140bfb92feab4bfed16ede2a6d88f49f63b3a4c18197a00087dc645db4bb8

          SHA512

          b3c0704a72f829da2022d21b5b5f6cf02537a707ae3d5aaf5603eed5e939e1a6e5716f07b8f636bd9508fa07087c5a90009ea5cfc96696f12fa5d44b79f25193