Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 05:08

General

  • Target

    661a6a581c15141a307e561774ed0e6d_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    661a6a581c15141a307e561774ed0e6d

  • SHA1

    4207d2a13ffd63372344de478c599b3a14081eb7

  • SHA256

    70aa046f3fe594e567424d11127325cad0e8bd7fa2631a3b164eb8485c5d6124

  • SHA512

    3b75e4b6922cd0418f9765867a40b9253641881083a14e7c48551dcba437b15bfbdeedfcd144e7d462658d50e48961b33c5ce4e8baba28923d48e336eb38da86

  • SSDEEP

    768:6XuMZmwgCLWarKmRYvoU3ovzTN1ftO8iN9AInNznRs0IAobYXkkbhj:6XFZmGWSKMYvRobTNBtO8iHAInpn2koi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\661a6a581c15141a307e561774ed0e6d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0dcbcbca589877234c475cc294227681

          SHA1

          a4df7ba91188cdcd6227fdd3584a053dcea82047

          SHA256

          319dad0db1d9b88ecb51739514a4beedae93e076e0bfa72c87166964bc01bd83

          SHA512

          9a0d7547360b4774fe01a6f7553dd3b95404ab8209a2d55d51f3727b6cc81ccc9cac1b3c3e3260ff7f80e385e743a79f8b8b9013a1f8295ea9ad5efc965e4e23