Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 09:30

General

  • Target

    39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    39695f7360b87b37cb278fe27de242e1

  • SHA1

    6790b8fc4ce3d5d539318893137cb1eaab89c487

  • SHA256

    55a2f6648b7828a199dbf8d50462a1c8689285236829cdb4b78f2a5f87a0788e

  • SHA512

    130950ec96512a977d37f97dd4a25176416120ae56f70aa6fda3202be492449b91087da028bbd6feb1cd20b00ffa4ff20eac1dae5e99dbde5126e808b77e260f

  • SSDEEP

    384:VzJtK+5j4Yz1xZRUT1AMkV7KGYGbnTQFBr6puZPhaC/dGZed2xMih1comiCihX+I:VzJtK+99z1TGx/aIGLUFR6pulgAdGk0X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    21171d00cc9fb2eaedde767bdb5ff31b

    SHA1

    4bdf6e45696d531b739dd8ad27cee052e2699086

    SHA256

    7cb847b5d142768baf6fb338c58f57621ea6cf59e48d2f2396b77a30629a80be

    SHA512

    3468b1e44133e538283654d06b670de8e4952674e969645a83717bea728b2ad9f4daa0cc5df30e8036c105e61089086560c5938c844e1644b64a452e80b2be57