Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-05-2024 01:14

General

  • Target

    7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf

  • Size

    62KB

  • MD5

    7b34216194c7c42a884bea79b31be753

  • SHA1

    87db4ec52df3d833985d8a53eb8e85dc3d22c7ac

  • SHA256

    b62b66ef8114aa5dfab7b4b0327d6a15fe0cd00a5488ab11176e01bd68344b61

  • SHA512

    0ea9be3103cdfe3a296032fa54bcc6a02d67790293598cd0b66f4981972930a18460ea7daa6f6067331b5846c6c895c2ced54558890e485d2cd0271ef1de00f7

  • SSDEEP

    1536:iGF4pbm3la9gA8/pd+UqcJI7RGtS4XnANLJh63tHww15bRkgC+:bF4pq3lggAipd4bGsQO6Rwmc+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a27d2912a7a483cc6274f1ead4dfe3aa

    SHA1

    5740a5a84f58c9d89ddf585a3a7464a3660d8142

    SHA256

    e4706495d4160ed1eea18f8dbf7a94d67fbca212bf7c0fa633845ec8f7c2eac1

    SHA512

    bfc7aab9e7142de598d73d9d81783cea62789997e7b187324c20b6855158be57162f1da8619f42b10fa2c0d132f430abd0c6f5677a6dae272773be52164d1626