Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 20:51

General

  • Target

    7335726148d8d7e2e3f0acb2a6d44af9_JaffaCakes118.pdf

  • Size

    304KB

  • MD5

    7335726148d8d7e2e3f0acb2a6d44af9

  • SHA1

    5df55966d5d5793d5134365f4df41fc33b96b854

  • SHA256

    0c7ad007e9d29468050def1c88d2ea210811b612f3c01ae5c4a307ff99053960

  • SHA512

    4e44e4c7f11549326fa492889c80f28e2f2102bc8d90606d5cfe59964f94ee03313477e1250f43c301be9b36aea6a5a24058f263550b077b56721e651d4aa424

  • SSDEEP

    6144:h1p4PmZAxs+3ZoZZlAt9Zg37CwZcRj+iJ3gczQm0:TpKt/YZmjy3Mgm35zj0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7335726148d8d7e2e3f0acb2a6d44af9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ced6f72fee1bb11b8be917183998a46b

          SHA1

          4df53c4330d1088073a7f9fcd6e4342f1c5fddbc

          SHA256

          4c28ded2acacde55080d6d20c85e8c38110ff1b4ab0e830bac6bedb8aa5c9594

          SHA512

          d351f92a73faf981af2504b5ffdd70c477510bb028098c219755cdd70547c237cf31df78886b3137bc710e922545b866e41f522a0de530b858f272cc266549dc