Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 02:00

General

  • Target

    37a9b36b78ee0743b4823b24fef2b568_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    37a9b36b78ee0743b4823b24fef2b568

  • SHA1

    53773fa961e6253eb46607bacd8a3506847b258d

  • SHA256

    d1cc41f70193503e416fc20985b24431a2d8ff4eafd7db5c102b5cb533d0b276

  • SHA512

    64fabd0b587baabf489a7aa68cd1d3215fefd70e8844aa1f06eb1e68ed991b612f188217703c26813a67892dc1c93aa8e2bad709fdb236eac47e396a6db83adf

  • SSDEEP

    768:ngGzpDF+NugzXRcrXVTPbxqRTl510DjwXSkHgTir5eZOxOkQjB+VhM1wj6gYR91G:gGFJekVTPVqRTljMC5R0kiasXgYH1Oqg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37a9b36b78ee0743b4823b24fef2b568_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9f71531d00d73b2096776eb3825f7a8c

          SHA1

          fab85103dda6a8691090223aa3c24b9ca22ee3b1

          SHA256

          c2481d123fc8d814fa3057f7a660d19e8413ebc88c1d5ef3a7f5b7e021d8df5a

          SHA512

          ee1f07a4ed17ab8c8b3601a962436213390d0ae50bd9729cec6651d65b2d4dd8f0ee8fbfcee82e5dca198007802d624bf1834af3df338c82794c4f954e6b6e0c