Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:11

General

  • Target

    6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    6919766d367a61f6b89bae00a4086381

  • SHA1

    0af05932ff53f0b3805d85f5dfede845b825aa9c

  • SHA256

    557477ca3816718d83a81b6e32bea0bb24f99e1ad766a620f531a232f38b2428

  • SHA512

    0195643baf22ea946c4b93a873a3517de6bfe379c21fa0114d0ac007c051805b9efb06b2e8eff0cfee180943a9b1a33f535dce26fcdc8ae3724421412cb03315

  • SSDEEP

    768:YgGzpDheXXaN4xzejrHQrB99pcuX8KPszNDD5biU/nWwI7GBdNcj:1GFteZ9pp7kzNX5bimWwI7GBrcj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    73f774bc886121fb787c362f3692e0e2

    SHA1

    51c7ca14591575fe6270a1db6d5dc1c3b9edd6e2

    SHA256

    dfd6b9689636d36fcf72d5a700ddf81589f54e6a429e36886f90f0f539e4c55d

    SHA512

    1152826843552e774639324b2f0145c0491ca29b01cfc02ec11ce64d2740c2853542b784e96774c836a9bedc9539844ae3fee7102c5853980dc4f7d72a1d0244