Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 02:42

General

  • Target

    904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    904908c27d2f7b0d8e7f01072177cbcd

  • SHA1

    64653bc8fce1188ebf6717dcdc098d591352c121

  • SHA256

    3b501590abc5bb86deef934c5a719706333508307bd2e532f7c68960908d29ce

  • SHA512

    a6661b23de944479b275f228d1cdc54c1090d9548fc60eae14fc2a694a191db3a7e887528afcc0583cf40b39337d49498bb8fa355fa4b229f825a8dab0645194

  • SSDEEP

    768:0gGzpD8C92yrqmKXISiSGJpnfenl9AkzH5bfkwjgK0h14Zq96D+UNjWMnPBpbwnp:BGFgqnfenl9AQHVkw30h14ZqIrhP/bwp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1608

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          deffaf18c795e1b2a2b0d2c550bfb402

          SHA1

          f232060889919cc4561a1a65e7bf81fe315c7c64

          SHA256

          20c50414760656ee6facfd6106cc3e21d0a7a5cfc49f4a428fd6dc57ef63528b

          SHA512

          26fb7006db81e7e728c2a23cf7a11e2d85c92c19bb849206fed9b391fc35a50f01aa944711137939bc5b956e91afad46a91e916635d4b86572cc8a9c6a0ca7eb