Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 12:06

General

  • Target

    71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    71e5cc7bbb908433c8b6eb780011d0f7

  • SHA1

    02ca438c51522edc4e6c1f4df0d7f18a9b107e4b

  • SHA256

    1ad4c5c48a51886acccb5efdec79e95c2c64dc625ca6390b118e4c084d74a7f7

  • SHA512

    58695fc9c853d1ecbb6ab43b06bba1dfcaa23ffe71670b1c2d6028a9773ceda81b3e25b507cefc7bb41574e22dfdd0b1b7317c8e2bb66427e4a190db34ba9515

  • SSDEEP

    768:YgGzpD/pN6tsrgp8ABZgoL+ox4U2KMnRL6P6df08t8L1g:1GFDpE+82KMnRL6PYfvCL1g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          26114fc0be4e6b2709abc1e7ac3daa2a

          SHA1

          b150e1fc8f598f3084ad295be2e8adf201157a5d

          SHA256

          6a64a3da2202e64c53a2fbf7d7cbc9cfbe7d862aa9bdd89600ac706772b8c610

          SHA512

          30934548c2b5a2b9651d3fa7d79ee9adfbd0db9efaa5307b6aacd5fb12120930de6af554e97f0e16e2b42d77c00a6eb53baf0be638ee78e86197e3b97f88afaa