Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 03:48

General

  • Target

    743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    743d20ec2f50fddf3b3f4c145eac79ef

  • SHA1

    259ffc3e9b05482721515f3f217f168a8f3b9fa3

  • SHA256

    41958b9648195602546ab92bc9cbce7a1bc2b5eddf240027329ce3d2b5433eb8

  • SHA512

    d843b1eb0f13078259a2802b13ed94f6c3cb41cd23581a4d7b48a4a5f2fbd90df65b1f8371ad604d56b55667a8f24dd411c07960ba51e3343af400efcbc50ab5

  • SSDEEP

    768:HgGzpDl66r4YU9MXyjWa6a6x3FgQlB1VoO8+O9vU+7m7pue3FTL5uc:AGFx/VfX1e+O9c+7m7vL5uc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d8df23d4ddb0f59320349cdc3d9f68a7

    SHA1

    c40bb8222c827a153a42ea41c4d0c3c84b6ab482

    SHA256

    b6742ec162a4b8bbc2f71be9fb7049b0164ddc3c70438c58b16ea357dbf48d1b

    SHA512

    e56545ad4919c817206ab6feefa21d15bd9413ff80e684915479a89c045f2f85b881582c739d767872909d5a3ed0e1b56dd8368905bedcf07dfc4bca4d0b702a