Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 19:07

General

  • Target

    3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf

  • Size

    52KB

  • MD5

    3618ac2f834a0d9037af22fe4d09fae9

  • SHA1

    8db7f4eec22dc2f8c0a0baf16e1cb7c992e0e026

  • SHA256

    a1aa384d29b168d5d23a57ae912c208752428dbc62d1dcf3aaa60cce27f7ebb1

  • SHA512

    3dbaf730763cf8e1211b271196f9820dc492076282e8b867a28508c9ae25f5841e35f280f179026729c9f550d1fab351202f9d15b2f9b92e0f91c5c471ec4144

  • SSDEEP

    1536:sGFepjeNVz0r63BtUJRgFXinVaWkuP7+2ce:JFepjeNF9tASynVRv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          06716ed66f066f193a2df38d64843da4

          SHA1

          1977952635c561bf2588f42d101eecdaf884cb54

          SHA256

          031637ec9ca68c70f31f97ca20c96e6b081e38634444584fb89f98b62780fd26

          SHA512

          bac7dfacd79ca63ec0b1a9b81b53b54c3d7839190f3114abe95ab37ba1d6c54557713efb153d9af5597469d9ebd3eb6105e5c102dacad7b257d22490eff96e27