Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 08:26

General

  • Target

    979f77ce4f94df43f1f264ef62205ee1_JaffaCakes118.pdf

  • Size

    58KB

  • MD5

    979f77ce4f94df43f1f264ef62205ee1

  • SHA1

    cd7bcbe1070539f48d87e1d76de410e834180a4d

  • SHA256

    41cfa600578ed2983eaa096a75ede8f7ab72f5ac28a4d8a9c6bbdf12354b08f9

  • SHA512

    9d3278ee74af04429900e8f11ce98378e297a5cb0e515c5ebcf23319bd1e987a29b9f8e6ec0381b78bbe481222fadfe9f584fe126c11ed09bf8351630dac4174

  • SSDEEP

    1536:aGF8e1dgVMWOU+IxqFKsbzcBl9JJGlf71WlJfFTzjYBJ:DF8e1eVMWV5QczJGlf7ANx/I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\979f77ce4f94df43f1f264ef62205ee1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8075bba38f374a98e47efbe8e3e22211

    SHA1

    ce73b8e9f82a67a0a390615a02e10dec89a6f090

    SHA256

    fc31aa7e3c5291da7b779af6094ddf49731734716264b38013548454ee4e0eb5

    SHA512

    d8bf145deca3c92bc11321a31abd69cc84236e744af6b59462563093cbc14d472dc20b15e01715228cc10dfe1e592d635d4ea5140f9a3c33cf00bdf27c0ddc27