Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 00:54

General

  • Target

    31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    31ea1cdac7002ef658bacb9c4ae8d8da

  • SHA1

    cdf15257a56a58e83ae5b4800183ca4777e1bdd7

  • SHA256

    98b97fbef0d9a0a70176f20cfd6c37325bd9edb8057eddc8a2a26d06925194a9

  • SHA512

    cbae137ed3154eae4fdb3b011b4928b38dbf8cd8fd6043a47be25075ac015c0136836f32d93dbb07513fea4c86df815567f5103f3a1ece3b51260ffe8c649c2e

  • SSDEEP

    768:qXuMZmwgCLWarnE5Hpxoiu0U0s2uQdyqb4R0CoNDijYDzEWrzNyUwTCOjszs+8wE:qXFZmGWSQjoiu0U0s2uQdyqbnC+N3EWQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    df695377a9b628c95278e813347743cc

    SHA1

    78d33de2f52758841bedbda757db2baa94b668c1

    SHA256

    11a460a8c3ff96e2cba5d2de7045d59f616a14a32e6f94f12cc88e8af14387a6

    SHA512

    9138599f86cbf35ccc10f274da273d340bff145635fa21a1a565d8ada02ee91844c29f4da76dbdff83a3495b713f1d06d24613105f7435ed81ad1776ead55a5a