Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 08:34

General

  • Target

    942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    942d8a85f6a02fbccd100218c7087b10

  • SHA1

    645ef863a9e30cfb99486856e18a8495af920221

  • SHA256

    c45a848edefcfcc912e354a34de15f034544510d28923e07e9be8559fbf625fb

  • SHA512

    d77718e5a9e9f9920d7fce97e1fd5ff158857a5c3d91384e70ceb224cb46954b3f864b1f02495d5b22bc4f8cfc875c4e30aa3b34e2fd1af5b0fed1cd518809c0

  • SSDEEP

    768:MXuMZmwgCLWar6E5HpxDPQ9b+DcIuOndrbYqRM2ZuElt9dWNRo2cCTdDSty9GiNU:MXFZmGWSbjDPQ9b+DcIuSdrbYqRM2Zu6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          511e10415f2f777fc4b0d996112ad404

          SHA1

          459a624719f2ba0b4d6b2901de5eb521b3a852e4

          SHA256

          b562f0a43fd2a0930b230dd15c393cb80864e148829b4115975ee43c0af4972c

          SHA512

          a1a9ac6fa445e12a2ba3a7ab1eb1f33988f413a4aa8e34b2d4a837750b4fb69d0a5a03f9affb380fc030a2f952e9e6429b5d6e939b2c9161ff76002bf85483b2