Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 10:54

General

  • Target

    24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    24852da66312f53d87caea9db0ad865d

  • SHA1

    e75a179ca0bef7861d6b9432337736cc8c044635

  • SHA256

    859de4b8df5d713094db17db22bba481f9ff9d428f6c05513946f88b3a3577eb

  • SHA512

    556f99674d35ae76dc0b69478e5de0bf9b8729952ecef65f4b98e7c51561a9335f32400fa8ac917152d05a09629ed7399c0ca855d2933a3d29990e3ec9cd833f

  • SSDEEP

    768:kgGzpD9p6KgU0blSwn297eb+05rmnkBzxxn1JeZ8Y88Sr0EbIVBRJNGKTI:RGFRptNatmMnrDY1n42BRJN5TI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b9ad217eb322a679dd6ef2ad0ee18f79

    SHA1

    a50e101b2313d1caf9fd5befb05f7227c6b88591

    SHA256

    ab59a17768d5a274108ad54356ae993b7a7c554d7e78f0b2056d4d76369ea86a

    SHA512

    24744e29ddb1bb6276e3504a7bb517000c13bf017bbb6f74cec259510963e097bbcc47babaf668fcf241e62050d35bc7e2cfbd623d61e3f7f4f86867eac93353