Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 09:53

General

  • Target

    66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    66dba59f9f9c6f6c850582580375bbe0

  • SHA1

    61c5551a684d95a216d08fa454048f775e2ac225

  • SHA256

    d27486811dbb7f319c2a43e956c3efdbf704b28e1ee730f410f0689ae64aaf7e

  • SHA512

    2791ba3e28a115d9219a78948734ef9f061495e8cb1ba972988e6f7d2a6c7df27a22dd87ab6f7f13e12dd33ab03578df1e10165999fb4b531e9627e0bac0fed6

  • SSDEEP

    1536:CyFVSWKAW12PNVJGmmOuNDQ4auFJ28JpbN1o/YLTZ+nLxVeoV4DIzKSpGylC0zbA:vvSWKA+0PEtJO3u8gtTKKd0FVZVyIzKX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9968a5dc62a6e19a9f74ef99850e5e62

    SHA1

    e295990c4912a57393d2caeb0857cba050c6731f

    SHA256

    3793a0c259c5157ad972b17aa323a680d89f0c7d4796a4b21ce3ab941d7b1920

    SHA512

    3e5f864995663250630e3ef7dafbbb5ec00a2bd0152c119005b0c04961f7fa74ab96548f0b538ce736cfe40f668cb1f816d1c00fb0ab72e49ac85dd968b74ad1