Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 00:15

General

  • Target

    373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    373fa159c5eea744c9631787510a9ec3

  • SHA1

    ba2f97af50c59345108836cc55ab19c69b4b2e12

  • SHA256

    9282e94931bb88624c0383196a6768bb9b9a39a14a0f272a7f7244d6c11dde3c

  • SHA512

    1a6190673658d5e5ae383f896dad052ecf63c6c76f149162e70e7cbd6792620a1842386cd45b490949dfccc1b8788dd7a4ca3ecdf353991177ad540d06e5cde5

  • SSDEEP

    768:9XuMZmwgCLWarclpRRUBq4hVmnXntQ17tKJPeWZmp8rvcBCxEcja:9XFZmGWSipRRUBB6XW7IVyBCxJa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4d2f9ce4808ca66a736d6978a416d749

    SHA1

    0610ed41fab89fb1837eb4d3d85c18de59726a29

    SHA256

    51f04fc16633e7a2b6573b81be847d4e69eb130332ca6573df9553291ee176f1

    SHA512

    7ac7b02ea0f7fef569c0e953fb04ee98672d1b142787afcafa8fb9700cfb8a36bec5d18bfbf606ca1f2254964df62a0dc5893045520b6c21d7baf1dcb2a64edd