Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 09:13

General

  • Target

    717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    717ff5077385451e567bcbd7d6341c1c

  • SHA1

    f35ec786c0753e7f0057f1c45e44cb7df51e1de1

  • SHA256

    81fa99f9448928a4e2a56a63be950117ad3eaff2f3b2e43280904c069a1a435f

  • SHA512

    f149f1362d2255832feb4a9f7afdd4b6355b3375c3c6c2360a7167b68e62ae9274ecaf7c9539a766360fb3a0d374d3113f77db1dd8c195b27a9e7b868f1e9994

  • SSDEEP

    768:ngGzpD2pGCV1NAfrFEv1NPMUP1i/2RTVkFssIVs+uXjT6/2n1JW4:gGFip4T2RVisbVzunI21JW4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c1dcdade8b3639123112d12746078607

    SHA1

    ae062ae67a4c8a2f229211daf735a1ba84e638ca

    SHA256

    66f967bd3da36d5ac2c6d29be68054fb0b92af6fcb851c261f0a4c698c99ded1

    SHA512

    ee6f380e4b11cb372256a8a68b4520837baaaa2f266646fb5f0c3cce0d89201654be4499ee1cbe88f99c4b286c47af39f4fb9d93d5daf40716648dcc508cc70a