Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 00:36

General

  • Target

    48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    48c5ea46ff884bb4df737f6f09554e24

  • SHA1

    37ec6f67bb167636ff8d99ce23e3ef237d892cb0

  • SHA256

    d2366454aafef4b28efa57faf3bd9a0f5858691256b02d369eadeca75005cbf1

  • SHA512

    ce1992a7dd1e4ae880e2d99655f7cfce8e28cb294cc55f1620c773a146380cb5e238624c6d04d120943f832a83d857b20dbbe8d2c5880f71a136559724fa2a3e

  • SSDEEP

    768:zqE3aD4ENQivZuqoTSyV1i11mPCVrGnmLupDQGatFm2OJsbNd1//MLTZVnTxbnD5:zqWa8ENQXqqnV1i11mPCVrGnmLupDQGz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    66d92649618197a1dbab8b579bfb025c

    SHA1

    bede2dfb38812e369506af88e51d509375409f59

    SHA256

    b6605e70ebef3a91f2755402f4cb0fd65bac4eba23a8335c7058323c4f4637e4

    SHA512

    9caded6c9dca979abbfe8079d23196601cbcd2fd4a044d07c0e70ef50851797d6d602ad78a93ff829e08f0bca5f9933aa7d4b4a61a9742a7ddd1203fe41a2512