Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 06:59

General

  • Target

    6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    6dac7c8252e271c905e8ddde1d4dfd0c

  • SHA1

    6d54eac862ef978bcb7387253d65d257b94e7724

  • SHA256

    8981ef62701e5517437ad13668f3fcd9d489ace584080ce2088af4ed3a6e8824

  • SHA512

    0e2f0199b83309ab9a5be6593abd71eba009a5d92f76cad17a9dc7038966e6e0d3eb1ea25f6bf152592dd37d4d003e1ced98c85f255c376a1bb67bd261412a93

  • SSDEEP

    768:V8Gpszgov7tHnQkylH1PJhEdVqOreTv/WljplCIcn7cxHE5RXuMZmwgCLWar+r:D5ovxHQkylH1PJhEdVqWeTv/WljplCIl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2428

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e6748db9c9cc1bd78dd523e8424fcd4b

          SHA1

          81b4e4f5599b4be7fd43aed100fb99c7114baa87

          SHA256

          986e6ea4654db2735ad3e61454ca02e0b7bb0788a90bb7305b048bfc63235220

          SHA512

          5f3cab307c1a61c06375623c1dafd88bdf5fb6d831125bcf389375ddb8cd2c913aa0a21d906ad43ff048621bba1eb04ea1c8a96ab553ab4c383a28e0ab0e7ee8