Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 14:46

General

  • Target

    2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    2888eaaf05170c02401f303fd17cc046

  • SHA1

    53f56eac2409bc976615e51f585ccca100061b7e

  • SHA256

    dcbc978bd444c6c4a1c7288efd836a18828447067b13b33a19a774c79afc5d2d

  • SHA512

    61ab96390bbc92089b097d5bed856c4b2b826e1a201af16f40215d1ea2360791465c772803fc6dac0fc3bfab62f9b577d3ac4b71e478f29416cd202d6705307b

  • SSDEEP

    1536:EhwwK6OJfB8aso7vfG7m7sxZcisk6agiLKiSJlWMfgeTiWAB2XWQpOCJwwQPDpwt:AeFB8IsxZ4k6FiGiIoB2CCJ4a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dfc3ad2ad0dd752346eaedd1de7cb00e

          SHA1

          77dec08e99251f6e952c630f8fc46a6466d2287d

          SHA256

          d10d923b5a193ac6d832b6a13156fa3589eb372da0b667ab15c96ca918e1a967

          SHA512

          3f92f5cb3fa0c4a013b877000415089058a218509e665d0460fb8c2329357c91e6903cc22b7ecdbe9271981c5f5b4a132680caeed56d83762aee25adde36e587