Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 00:30

General

  • Target

    704b5219917c852566d4c4365f0e31e5_JaffaCakes118.pdf

  • Size

    354KB

  • MD5

    704b5219917c852566d4c4365f0e31e5

  • SHA1

    8cba0a22c9874215d280d16925fd4656f748252d

  • SHA256

    d969af3686bcbee74c184ca7aa12dde6f61c149170bfff6924e82d5699675b15

  • SHA512

    ac9ad47792d80a9f8586950002422c67e42ebfeb50275185fc1498e6e2ad416569bb99f6c3a0688f27ff1b16e4557c06af5009e8d89abeb8ca48de4fb20082c3

  • SSDEEP

    6144:WnEkgE2iwlPWBxgUOz9vWK7uKWjJEcaBXOt9Y08GlWyzWx6Np:WgE2idTgJUKy9jJEHO/Y0BAyzWQ/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\704b5219917c852566d4c4365f0e31e5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a59ec24e20788358185fe17f0a59559d

    SHA1

    e8623868ad1e02235f1ddd25c4ceed50d9a4a791

    SHA256

    f7d290686a87abee8418107d09501c269fec7f358650a28ea276b3229b1889da

    SHA512

    a093dc43f2d0054141ac00930bb4c4c94da152ca96f8a68cc188ad9e6c63c8d138d8eadf8be94166b128d4d1c970ed8d2a7601de6e9047a952a1180a91618eab