Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 08:15

General

  • Target

    11d7e5c6901526aead46593d3095edc4_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    11d7e5c6901526aead46593d3095edc4

  • SHA1

    6227d99e4e71eccf0761bda353f642a491617f6d

  • SHA256

    24bb99fec02f667cceb1577b7dd463d7428eefad7db5567824a90695fd0038b7

  • SHA512

    148b6232a6365b580532f866735f300e4a71697e9ca973a883e8e02bd2494755e2ff7427e1e978461ae42e33d21ec0c5d1cdf7a45abf19aded12f52fdbc30532

  • SSDEEP

    768:WXuMZmwgCLWarbE5Hpx+HhXzVhOC/s7RlwTRqMVFA3/Rt643/Rh0tulT:WXFZmGWSUj+HhXzVhd/s7RmT7k3D64Pn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11d7e5c6901526aead46593d3095edc4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1284

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          353d2972549519b1713382659eede20a

          SHA1

          7e9c1ae93af527e9853dec46f39501a9a9802cc3

          SHA256

          c33af8ae3f59bf01cd4473aa5d78d725af78a06a22b6ed5b2a41c86a8d0fec56

          SHA512

          37d3470f8f00ac7ceae2ed7d32373a7693d6df39556ee05344175750117857a0ceb1489ce33a811f47612cc738a8bb1551d030f282f9694cec6defbeb7ea129d