Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 21:05

General

  • Target

    68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    68a220754313027bc5aef1cc421d3752

  • SHA1

    c9388dfb40625c41d58c55cd2aa52b448ab4b8e8

  • SHA256

    6e4228951dad4bfb026ab7cf36ffdcb7169c98b074c281609960de2c3ff661f2

  • SHA512

    3fe43b5c995c0701783f44ef0362a3b04cb13c53999f35cf64555a910e7f442ee8bfe0c6121261e9ae3c8a0cc0bb29a04b970f863e4fec0a324a8709d6f6464b

  • SSDEEP

    768:B8gGzpDsMv9wYqTOicuqVoF7pDHaLbhq5vsfBGzou10qEXl:TGFAUJixLvsfocTqEXl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    80d95d775b8c5aa98caee866e666b2bd

    SHA1

    d411c845dcf83ae524f305761f48492a6697de5f

    SHA256

    ab8be8932336ffe9638bd9a1f4e9cdd8d46f2dd379dea5511c444137e3522737

    SHA512

    6ecf0eb2b75e9c8f2a300b53a34e20a35f4ed87857588d5d2a1be52901cd4940025f06ba48a8452edf54e9027a4af13b9f4f3c1f9acfbb2231b5361b12e2fdf1