Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 23:51

General

  • Target

    3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    3d17c9bd51819b236c8567ebbacd68cc

  • SHA1

    3d740305b78727b48a204e80bb212f4dadaf6ea9

  • SHA256

    f5dcdf98ccdb108ca163438fce4b441e1d979a5b5f249df6694ac74ba2f46079

  • SHA512

    664ce662af543a9599471563d56e0b74e2333472b1269af864373dc33aa9fb42f600685a4ff1919acdc075c100b08188021a97456c911ee9618d7a82764e8797

  • SSDEEP

    768:jgGzpDde80RkQZ4OSsa3R5+r8W1/PmvWoCdVvImqSwxs6ZAiVXDaiqqhG25DCgHN:cGFRe8Gd6mHwz1aiqwG25mFfh+bQA+R4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f95486ee030c81042bbff584862ab3b2

          SHA1

          5445050a6c7fcd6dbe13a4dc0d769552c2f87146

          SHA256

          77c17f886b715453adb8e6600063d94d309693aef109078b57face7693d88383

          SHA512

          308a3a4f731b1a2557af65e7bb11728beafbf2499e47ec9f37c88f955e84f487d7e22f27f043550d79e79647c9fe1988c3a1bcf07b9701e686e33f0072fa5a08