Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 01:29

General

  • Target

    320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    320a0ebe44bda96a6d5334c7a601f1da

  • SHA1

    a5068438787c9a5792d5b13184c288d3ff07b2da

  • SHA256

    cde4ac6ac03b4a2d97377988220182bc787c29fb1c6e477b37060b08aba28b30

  • SHA512

    246a2568240209167e889cc7403262d81bbbdde5c95e747ada8bf42dd382c3d81b42b3240a5302101007e1019fea8cd0fdf79bbefca785c31ebc03604b636a02

  • SSDEEP

    768:l2u3mtswYp8irFImCupDQTaVF3PFFxVvOXgQlQ9E5vXuMZmwgCLWarRJ:QV8KEFImCupDQTaVF3PFV4Q8XFZmGWSf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e0466351406a9f9201afc931259028e0

          SHA1

          31bddca49c0549bd125152895d70ffc35999a8c3

          SHA256

          307c5e2d4a7ca2b185cd4fc579925d429f83f89df815e7470f8b7b143687d609

          SHA512

          14332b1268a6e1b2768c2a4bc6334913c2d125159926f1e5d265ce45cadcd363a03035ae31664f9ae6e07c4ceac4da97cbbdadf5eab64469e95262b704ae0741