Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 16:50

General

  • Target

    359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf

  • Size

    53KB

  • MD5

    359533d82d90f28a798f66f0b49fb35b

  • SHA1

    d4c1be22db6ed96dea976d66fdef65399a48de96

  • SHA256

    9740124fda8f3b3462ae22fe94a204b56495bc7a436768d15ce35b78a3756144

  • SHA512

    0d8a899b3a848dcd92fef00b90c11c34b84c9bda52692f3121e84a8bfd595a6e9dc63196ef21f8a8faf2ac5f8b0592d3a2dbf39c165b557fcf6a4d80d05da7f9

  • SSDEEP

    1536:WGFm11ISOqznIz+9r4xDhO9W+u3igv1VhTi0ms:vFmTIOznrd4xDhOpCVhZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fcf42435f426f95cd5c91c948401ee45

    SHA1

    002d9a72593df0e952633f0c8b89c2ab0e9839ee

    SHA256

    9acd6c3ebbadbbfbaffe78a34bc06ff88d1b1e101a5c922c6ab8145cadbf019c

    SHA512

    10988e38083911f6f610a00e171e15df51aecec35d6b7edeffbb23ef3a1871edbebe3f54837b109ac666f018fb6c3e40e7930ae0abb5be66c0d34a0c066ce5ff