Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 15:19

General

  • Target

    167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    167ef4e22ce9ff4483adb1c3a6bf9a20

  • SHA1

    184de7529b94ca80b0a0e4786792f7e00259c363

  • SHA256

    3fd95fd479896ab56efedad6c78c4f3081e8c93d3a3b17e81eb8c779d600a373

  • SHA512

    0d1b5570cc7058ad1605c5137180fc53ac2d59e6bf77989db5075a3a95f378938c397b217adcc08130b8015b25b1107a560a69b3a141e589eb1c5f5afca90aaf

  • SSDEEP

    1536:goHHFVYML0xzCjJzSOQJMiT2ZTECWy/4NzWXHqRXV8WQpOCwM6SIquEK:LnX0xzkJzSj5T2BDXSV7CwW/C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\167ef4e22ce9ff4483adb1c3a6bf9a20_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3a218bfd62cda5200ba4e30d6357c82a

          SHA1

          4b4993f893517456beba4d3b09b58562a7a858c2

          SHA256

          3344082fa317106bcd04ae3a36c8625f377592dd8fddd76d0f684677f0a09992

          SHA512

          209f8d36365682e3b24e801ea0b4f456da9fbeb6a236f697239ec42f0f0ae96c049b267655b407e8e760f8e1e90e8368a3fb866970091b7f8da66d78f3523af9