Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:46

General

  • Target

    64041c30966d8f05678addaf081b35c9_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    64041c30966d8f05678addaf081b35c9

  • SHA1

    70288f00abc4b2a588fc5ef5390cf72dd63c4573

  • SHA256

    610ac8b79b764f5a27293a6a0d420529272c36d7a0b6341b36938456303cbb61

  • SHA512

    8d57e18bbe7673b766734ecb776beb0643180d1c0ae29f125b1e6f535ccd79b809c3d29b34f7a463012b47c81d1809265abe4eb0b091b2518720096d10fc6c8c

  • SSDEEP

    768:lgGzpDyBVksi8YrQgNVeZCz/B4LdhWbX9hizp7lmSdACd5P547K5jeU8KVRUC:2GFmg9hizrmS1d5P55jiKVRUC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\64041c30966d8f05678addaf081b35c9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c697f42cd4f0e61743f639c823f6246d

    SHA1

    d62d773c9224d015d562d74cd26589aefe24daf1

    SHA256

    1d2ade3532fbff8278e8556dd14fc336745696f722c22abcd61622d6ec921782

    SHA512

    dde10df2def92cb22ef13f86f8fff56955140828f87be156c7b35d44a178490475f5bcd5135097c92ec4b68f7176021a203abb53a194b6d6431063e7a991b525