Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 18:51

General

  • Target

    3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    3087d49b16370f329f3fef290c24357a

  • SHA1

    fa0a2dc00d497d6f7e494f0a6b9bb4fea775e09c

  • SHA256

    1cc1ba9de839b855e08649c61ad7247af9324ce5f80f3f480982966ee601acbd

  • SHA512

    b8bee10aee18d9a133aa6800bf732521450b79659350ce5a7f77b8d5499bbf99a4f7cfab09f54c36d867aac34a4bd134d34869fc1f77b1e4a709ad5710c9bb4f

  • SSDEEP

    768:WgGzpDwpVT3mY/AhdcQTbosiRrHNP0ViAZ2tJEj8YCJ:DGFkpVTmY/AhdclrHqtZ2tJEgYCJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    097b1ec3afbc143c4b4a7e206d11cb60

    SHA1

    114c1bb62b171907d9b2d7d626bf68cda7cee282

    SHA256

    3f6f81c221a3c7042da778f27c9db28d3a066c4fbcaeff619b756780ee85781e

    SHA512

    274a9c8c0f8b3dec6e15de10d867848ebf2e5296800e00c0fcf2f1a92c1ce71011b28023d8ee637831db8773ff78b14b4b30a2a572479ddcdfa50a16e41d3b1a