Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:45

General

  • Target

    692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    692ff3eb9fae3b3c5d57d5ec082ff3c0

  • SHA1

    b5a4f450f5616c1df6d525ef3f2313fd930464a3

  • SHA256

    221c925ddead00a09c22809556376024119da67bb965202736b5c15828de8d24

  • SHA512

    45ee3965dc1d1c49b33df5e4c4a6708785315c36cba3d3f00371f8432e9e6cfabd0027dd6020d5beac50ce403a9d52b551d37c189575561b32ac7eb3859ee6ac

  • SSDEEP

    768:JgGzpDI/C65FIC5US0oHAK2YYD2g8FFgPoiXMcocnp+Z9ULZTEuo/3eJURR:qGFc/YSUQYDVBFnpHZTi/3eJURR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bd7c776653fa564689c17d8dd289c9ce

    SHA1

    472b699137d86aaae5caeb1cfb27814f5833714f

    SHA256

    0af63e3301cedb9c8094f43056cdcbbc9878030c9bc61c2c0fff4fbb2dfc1525

    SHA512

    57bc346c77a26c71820c6db9afa4f5cdebfb7a6f6951f9870dfbc8a28aa97887758507c5a17efccb5ca894180f65a6eab53921fdf5de2b03ead027a842affc2d