Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 17:54

General

  • Target

    95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    95bfa74933fd002741adb56fa783a785

  • SHA1

    19675f4bc312038117b1ee04097d0a723bdc9372

  • SHA256

    a28b0f78b34f8650625fbb79f0b43987925510e060c851d2e738046ac281c680

  • SHA512

    af789eeb2134b0025f3a123c161dbedcce96b731ca99cfc14ec8cc158a16e24ad06033c389aab69d0647440152aa524301cff052773abcb3dbee8d8127fecda6

  • SSDEEP

    768:IgGzpD1p5nXfsO5oZ7a/+Vwr0ZOf6LRzzynbTp7lUgJlVvwI3E0/0inZPzBa6S:FGFppBeZw6LRfs7FJbvd3cin9zo6S

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95bfa74933fd002741adb56fa783a785_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    083fc0bde9827dd67c221395b602011b

    SHA1

    2a0e58ea6abdfd68347b6d222da54b7fc96c8506

    SHA256

    9c5abbfbb6af738eb82e449a9b0fe1a4ded83fd07c1e70dc067f8bb4ef37cdfe

    SHA512

    cace63d776e30cf705cd4fcc48c6c9b4add807a5cdf8f54677df022dfd99999f6126c8db82d66fd80f2be57ae1b454b14d9394a67b0d9c3b9c33f5f6623c6883