Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 05:45

General

  • Target

    cc75baf10b6f47ba78ee7006e1c10634_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    cc75baf10b6f47ba78ee7006e1c10634

  • SHA1

    a6215aecc3bc0dd1652b0aa2fc9431dd30620bbd

  • SHA256

    9af17ec89a2470b66200144761d2c2a003c220a296f3592f1360cb0c4b47a9f7

  • SHA512

    0070de6ba9b430d419f624f4799926d5ea9b6bd11b6a0d88e957068b3b688747ec4cd943e93e512a514b3147c8fbc6a6b347734fdf09878184064f629fd6390a

  • SSDEEP

    1536:QY3yx0GeNuZAhDuaXS0IlRe7yyIDU7+eb9I07WMipT7J01IgWOpOwrHHAv/kD:LC9ARHXSB/eD7+eb9I0gj9wrHgvo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc75baf10b6f47ba78ee7006e1c10634_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    746d27f596527fff152564fb0a1057f5

    SHA1

    61641ce23744d5e50d3f69970968cb8a05c4f472

    SHA256

    93308204c699adf88de144d576f60674ac80e60dc214fb0f490558c42dc257df

    SHA512

    792e29707ebc7ead2aadc66c78532d9f6890e2833b145f5908acc97356c0c7e0cb461ae17205b7831725559f5978eb062f5925b8ce9b8be4c4814ae642edf35f