Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 22:39

General

  • Target

    8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    8231b537f959f0dfeb958ca51fb525b4

  • SHA1

    900f2ae1a95c5cac2bac520fa3aace0ed03f9a38

  • SHA256

    c29798a7e52c05b5183f98ee025f0bb71954731f578c7ce5926a0abaa6da84ee

  • SHA512

    3be3f2025511daca1b1728782fa5fbff0c7c0406da82d2853310a6e8a9df64f9c6f63e5aa1b16c8289443c9c8193b20afea00872049b2633386fba77ff9ddd4f

  • SSDEEP

    384:Vzg4xF5/4Tmz1WP0fhwSGE3Wl+99aYOq8MLiJOByr/66JgpHdfHWu+erqUW2g8hi:VzZxNz1oyYn8SNciokjJYdfHbc2TcWvS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9598b465b3014d3b0c6094044a2056df

          SHA1

          c505c4eb17a91f8c8b3394665f9a955ea4181f60

          SHA256

          30d51f9e270d6e981413e58ca4ef9b02854cd014d3f02397d53a46b31cfcffa5

          SHA512

          770502a1017877941e02ff2966dc9b80013f3ce934680579115e90ee0808733955956b2883f0f47e8a6abf9a8295ee32b4051fe8d47779ec9f74c446703c7b99