Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 22:49

General

  • Target

    88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    88a1245803a33fb7e55500a517b4bfe6

  • SHA1

    1a96e9d99d289b3b976aa05281b7ac7438ab0e1e

  • SHA256

    9cb8283043f4ab03ebded058dfa2b158bfe7d1ad81a09cd1f4ca296d9ee010fc

  • SHA512

    f23ae0ee3fb2c72c46ee73aad983dae352e67d91a9aeeb77da2913053b2fd4e6625e1e7ff15045b3e67121c00bf3c93e2910ca591aa7cfa8a550c9bb16aace69

  • SSDEEP

    768:I2XuMZmwgCLWargv1mP8LybqV/9SMENTckOvGLa7KSww/V8K+g1xKu:FXFZmGWSa1LV/sMENTr/uuq/uXgnKu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aaf7e664f88b094a6ad4e745a7c4b69f

          SHA1

          da8859b87801bc1812c3eaa29c03b398a252165f

          SHA256

          77386a08e9c426c7e2e6857c2de8dfdd1c41799a7a0bbbae880f573edaa2ce41

          SHA512

          b8b6e017c1c10390b7c286caea8ff2a7d565390169e1cab9d674c8ef14df77d86873caa6cc89df09aa02c62e92529b3150374108d8e5e9c0caa3b93c5d337765