Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 18:01

General

  • Target

    60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    60726eedd252dbb09ce993365bed3deb

  • SHA1

    49c7f6a62c4751fbffcd2a5421b656c7948b336f

  • SHA256

    39629c4017577d5e15a523f9c409eeddec776ed5e1a554bd5dab3bb177a93511

  • SHA512

    2419da99d1955825b4a73cb20a21a3ef7a2381fe19cdc32d01f7b2c5fc1db91fec685f34be6d01d13f944edb0f4881c495139b1fd571ee080471aa098f9726fa

  • SSDEEP

    768:hTgGzpD3Oeo8cCkNiAQYfjtdXVwC0WmltrYiYt+O7WK9lm9GABiMJuzi:2GFCeZllxRu+OSK9lm9GAc3zi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d61cf6da738720f158e4549b5867ddf8

    SHA1

    24c059b69e8e9dc63872091d94ddc0ef88933505

    SHA256

    4205cbbd13dd6960ce8742b9f68730d7ce6d2db6039a63f5a335743c413f3c05

    SHA512

    3de274b5777f78af00bc18de94022ed2e561143804d13a6053505f9ab73f398af16174b74708577fa241556649da074a25a2a360502148cea5b4c401ecb6c602