Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 16:24

General

  • Target

    76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    76143ac8394a9313f6e0546258980bee

  • SHA1

    ee7ecc285532cac4c7e3cd49d35144a8b9d48c05

  • SHA256

    c67fdb6a51877f3feb2726779e13bbb6e89bc9238b349a49bc25beec2c2059dd

  • SHA512

    78e86897326bcda6bdc5a8a4a824ff731397b0e1099d8d7fd7baead9a008cdf5d8407494385364723c8bac88fb6a996d552c8a152041c9efa6d8bb575e71e69f

  • SSDEEP

    768:/gGzpDspvILtM41NujSerSQgbQMb47ZfFlhLfDTBVfIbgCL2ie0:IGFYpi1KfFlhLrTrJc2ie0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76143ac8394a9313f6e0546258980bee_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    76811b07ae943d2f3644ec5923bedded

    SHA1

    f17f3d79e554a6ed4fcc3959fa054cf9954f7f15

    SHA256

    c3163f32e353f4bd542492aad07aa7ae3e8bad865da7a7f2acc79fcce94c5f7b

    SHA512

    b4d69416dbc1c7a55969b2ba03b1de063970ae005a9c334e0bc3f498ab85c6097ca991cb18dbf050b57112c5bde17c2eb3a4e45a64cb2a3ac1aebd5c8c058e00