Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 23:15

General

  • Target

    23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    23cd43a37f29e61bee0f4bf44d1bb2b1

  • SHA1

    1e9eaa7dcf3c8de4f53ccacd73ebf88ed1393488

  • SHA256

    76347a478d9d8aeb9238e0768cf541cfa1644d3cd31cfbfb705b265757676744

  • SHA512

    11f25a8d0dd46902bded35fa73dc635ef386ff6e6f188b3bdf6061e071b12c7744222c1e8c5b3e39bafa6296275de96acdd30bdec919d9bd7421cc07500f3cfc

  • SSDEEP

    1536:P/KDNtUgCstl57dT/obRwSsnyqBVGWbrLjD6QPlMEIo2e/oT5wNWXpO/K2MX:HKDNtU5k55TobRt2H9rukMEIe/oTen/s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2bc5076b1c939483c2f64fceed39444c

          SHA1

          ffc9eae8e498e11e11d7b51cf2c44a5649a39424

          SHA256

          6a3d16b95190380029586085682f621b57cd091ff0f438bccc5787802f72e0e6

          SHA512

          0dfc98443cdbd2c9e8c94cfb1c61b40b9636a2858e00536f86e7445004687004673f5a294aa26c1170714163fa9bcb02b5fe62bbdd38a1388e22a3b9a44b7dd7