Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 01:47

General

  • Target

    4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    4ded5e76d420e4d07efb8e745fb48e60

  • SHA1

    9b4826a8d297bddefff0f319579bb3646d4583f8

  • SHA256

    26d80d413bfc687e137f3802d45ba9143c39f7bb1ba5e87fc1134bac65b75722

  • SHA512

    6a232e4d33034af1ed53b67474edf5330363765dbd9016b01eeb461b3cd8679f45059af7ca552fbfc228a35286f1a9bbfe5f0a202a36710540bb7c3a047f3679

  • SSDEEP

    192:oPpTzMV3+YOgR1VTxIrtEVBgwy38zDI083RvhUbRgjj0:oBTz+NIrtUBgwy38/3iRvhUG0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e4c495e1b847db072eb48ec658609970

    SHA1

    31e9f961fb37b5d905a15c8b17fc4726f451a2bb

    SHA256

    d968b95be3fe816fc8db5b1dfb67c14c725301024760e0f7608cca226b4e265e

    SHA512

    d8bf15e90d0d502a2f298e5872fb9c0ffd5249a04b07eb8ebff4e98ca271bf9a1b4f91cd2efaf5a0fd07e9442862eccabe80e2163b5a74b52d4b2daac898bba1