Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:16

General

  • Target

    68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    68f809121f59cf5d45c932c6b49ccfa0

  • SHA1

    cd8d83b257f4c59fc083d27e60570ead5c05c4c5

  • SHA256

    4ea2c7384d740a8ff5a5026c11b7d11e24d92e2ec8ad9db7d87e5ed9440e8fd8

  • SHA512

    d0109d4c979bfdad3375d09a776168305298f6d0d9b4a14a499b177f0dad965083ac955b0536f7470bd578684fd1523c3f6559b203f1bd6f4911adca6e488ef7

  • SSDEEP

    1536:GGFwpUR7luZMQ9nKUhQtQv2XEqj4M/6AvKr:fFwp4UZMQVBhQtQkTj5/6nr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0ef570fa68c4d18b64fb81d49bfeb2d7

    SHA1

    3ee00970bee48172f6e5bf09b12baa8aa824c0f7

    SHA256

    e5c616a98a0625ec8fc685261c6afe9713782f945923e971a4d279e22e114694

    SHA512

    23ff1d532ba58a171c5886e3ad509066bc02214098ba0e417c10c34469aa207efb841135d94bac5c5fd4c81488737a8e5c91e943096766c91f4a6631dc22ebe1