Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 21:41

General

  • Target

    7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    7355e7574113c68c1a187b21376460aa

  • SHA1

    1b2a3cb750f2b034b248eedbed33a7e26d04e4af

  • SHA256

    47904b30ad16ce9b17c8303c541f13fd0ed74bcdde980f812d85d37408fbcb8c

  • SHA512

    ab3bf50b8d4557dc2af68f7dca7d1bc026272cb3a1b6dd4fc30ddc3246af7efa8ebffc1b67dc77e2fce95606c6a62e43cfdee28565703fcbe77ccc02acb3f2fe

  • SSDEEP

    768:WgGzpDepjcrkNsKQ7gARNJ98sovtCa2gmXgWApUq+A0haZZqcBAqgatZuI:DGFypjgkGKYJ9z02JJc+A0YDqqARatZz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7355e7574113c68c1a187b21376460aa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    11a17afa668cea876cc04248a0fd0f46

    SHA1

    dbbdac09c730d85ac003843027fee1951d430d10

    SHA256

    3c539edf63f1d8cf0bb91f6ad85ef77424a295e689c46443aca5fff2c32fc20b

    SHA512

    990e8ab99e2d8586de0172efad082c9782c629d3c661c66e5f42875225420dfa9b1df648defc9eaf37658e2c3f5782274fd69be8c1056b189e473e4561d43055