Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 05:10

General

  • Target

    498941469d1e02c85603d9eade1c7845_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    498941469d1e02c85603d9eade1c7845

  • SHA1

    ad03441e8e1605dfa9c22efe813edd5a21c27963

  • SHA256

    215b60765536064c4795e23784915cf0565f3519c378ea0aab989b5a66728bfe

  • SHA512

    415e21c745ef909834a9b889b50c723624f9e5ff86db515f3f934ce84e9023666c9cf04fda9ef037660b416d24a5d22ed1b1174e242a7448b083b6c5e215f5e4

  • SSDEEP

    192:oPpTrGPHR1caGnmubORHuoWWO9BtXNzrtqmAI/Ku:oBT4rcVnvOR7lO9Bt9PtqmxCu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\498941469d1e02c85603d9eade1c7845_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    58e3520bb3ac96e003fbf17eb66a1665

    SHA1

    a3c9d2e25c7843b2e9f568d727d94912e2e1afad

    SHA256

    9c686c414c805e5c279c17d626a916955690f1cfb66d8ab66ef65dd1bc6ae5b5

    SHA512

    c76ef5443da04e9b2f950669b9216344e83682fe4bc7a648768d6c41a500967679ebd91fe5acc4b3025d5c94b804052d5240e28da68dbb9a84db389d9324f1fa