Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 16:19

General

  • Target

    926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    926b86d9542c59006b4dbb5c856d40c8

  • SHA1

    10574f137dcb17c7d093ddb408235d3c312edad8

  • SHA256

    5867008d6a67ca627c4c13b3d6069e1fd630daf9b877d4cb14e51b97b7500fcc

  • SHA512

    f15520540b6f933a2e0b9f7c59370e38e5eea3c50e7541f9f414cf95c50c66f9f542b23d2c50325374a1e845ecabe9f19134c3e18e9e8d8e1676f353879ed1ee

  • SSDEEP

    384:VzEKTqz1HVKenQrzNR3po+F047OuNZNToEKAJHodzIMw3sBqQIm0FGyLLisJASmn:Vzfez1HVKenQrzNR3po+F047O0ZNTLKb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    13ee24fc7459d895754594f760c29141

    SHA1

    31332d750517cc6c1b0521cfada09f36b44ab98c

    SHA256

    8f4e5fedf9d44f819e59d35ce8037755c5557756b00f823be94c1ddb5a94326a

    SHA512

    95ddcbe41c2c744cc1de4be6c8f880c38bc2add66fd3dc866b5244871e8f2908fb18b17f8796559a2ec32bb785e636dae3ae9c7afd8d3d1c7bd9c1fb12e8e1a7