Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 08:03

General

  • Target

    2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf

  • Size

    358KB

  • MD5

    2e238f3690f147c2c94551cfe0540f05

  • SHA1

    0633ee68aba1e1341ede6ca94cafce338f7c3342

  • SHA256

    dfad4d9c3676fd8b1f4feb99cf7f9c017bbd2d0324eee945bc5e9f5b4caffa43

  • SHA512

    b478ad057ffe3ba7c0447e9798150d6ad4a1e74bedc3c7c1ecf71eb640600afc71738120c802245ff0b55097a0aece0d2de5b55444bf6b0292985e5657708ef7

  • SSDEEP

    6144:rn1B8waYOGjnohGT35JxfQ9LlcWPmGBnHuMTbXizW1qINg45Jdkot/x:b1iwrjsGdXo9VOKnOMTbXizWIB45nxtp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1796

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9ad069c616a5dec39caee981d8080b57

          SHA1

          1beb6d0ec017522e6b74efe824e4b8834994b4c3

          SHA256

          cac99c3581c1010c7a849efc25318b0b521a365f73a723ce997e80774120dde7

          SHA512

          70f9e92a64179c70cb991bcdffc27473504dcea77aeccff983c1f85f4ef39bafe6224dc3e9a2a6a4b71e3d8b28ed83c27297fc77e79a3eab48f9e074593ee217