Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 18:15

General

  • Target

    25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    25c079d8a42f34f2b25a7c2d1c640bcc

  • SHA1

    a33fd856f6b469bfa7a5588e6a19e1c0ba576109

  • SHA256

    1ec134b3656da8d9a092895f52b2c0710dc1499729cda9b22b37d4d8b8f30463

  • SHA512

    cab7488abc8209fcdf3d4ea16c7f41c415ed19347fb460240f6701ed02c1ccb450fad81896ec08a468969086b79cae1991354e1d4107d0ad2cde0c6e815e93bb

  • SSDEEP

    192:tPz4ULMxLIKXHsfyxqEHOfEEwZvYvKX87qGYPE+r6c+WEjuNyRW4wAy6wf1kCZ:tPz4ULMxLIKXHsfCqEu8zZv7X8WGoEMt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    80b41cf8a188efd7ddd4c4e396abf3a2

    SHA1

    189d60d902d42efc86088549ceb39ffa1a85c3d2

    SHA256

    ca867c4b7fac04b001f4968ee4d2b616158c4dd96e2278aea954c88154096b88

    SHA512

    a2a604dc873cf0e5bb1cc0c8452abdaa677dbbab4ccf33881fa36fae7af03ca089efb307b7eb79d46c10f33bf7ee7a66ef202e10ce2e88817ec249b27f4be803

  • memory/2220-0-0x0000000002BB0000-0x0000000002C26000-memory.dmp

    Filesize

    472KB