Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:08

General

  • Target

    6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    6966a98af4aea6b89475f978feab0d6b

  • SHA1

    7d182c987dade392fe41d51e61cea488a2cbc325

  • SHA256

    0116062abb8cd583b62272d895d2408a6c5f018efc4876757a659c99fe4c3722

  • SHA512

    86c74c4ac8f6459a085e0702b9eafe136395ffc70fdd3dc3112ec9cbaf7ad9e62f60d6f06fb0844b8dc66691c63f92a805aef6fd9975f085b16a8f42de71366d

  • SSDEEP

    768:oCXuMZmwgCLWarvcity9ALlfztLBfyagKOvApGlPEMoCryK1aBT0Dx:FXFZmGWSNPLdtLtyagKOvApGlP5b/wB8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ac475a42ad18fdd18363e7ba7030d8f1

    SHA1

    3f4777b37e115778cfe5fe8afa8e04483768d037

    SHA256

    8da73895e36e16f8b26236a0dcbe180a377f95f2bc5216d0ed4f09e1d289181c

    SHA512

    b5338ea0c7cbca7341d75ebea99b0e6d41335be8160460e62cb447096cc54df4466dd5118ac0e3fec399666439bcf009c7c4c59f7d5fde56d38da5ea649bf46a