Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 09:26

General

  • Target

    33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf

  • Size

    357KB

  • MD5

    33e47cb9b94f9852902fd5dde2b8db46

  • SHA1

    b8975deb6b59ca91cc9b8ac16dd5220478986079

  • SHA256

    6c9746ef4927b26e896ad349249f95115292b41cbbaca4cf71bea8a9c89bd954

  • SHA512

    a3e147bf471dec8873ad7aed5655dc5b2ab1d3864728aa5dcffad51d24ecd00e7439e8f0803d639a0fc443f19cc45a086dfecfbdbacc1184b0372216197f0282

  • SSDEEP

    6144:PhC96z72HtThmi+VGFwMMMvZsVwVicSgP8DZvnr4z+1oR084DhcUbcrHuzTNK:U9zBhmtoFnZUying01Pr8+WR084ErHuw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    944f3e9de4466d7332bac8c7715df4e7

    SHA1

    f6cba6df2019bd6910777b64c8e3fc59ea89483c

    SHA256

    f08cefdeab6b857e7673078eff3170aef22c042392508fb01856b68a0c55aec6

    SHA512

    77fc57862f3012858573836624e684b823c19d4b7224bc8a83e785e99e251dcae7af0a190d052990943646967832323a26cb491f4937a4e4327156cc0dee0370