Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31-05-2024 10:11

General

  • Target

    86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf

  • Size

    66KB

  • MD5

    86a3afdf95115bd1f2366943e94f9206

  • SHA1

    fa7782aae8b3e02e5034da0c763957962f6aaba0

  • SHA256

    8110b8a60c744235c3aa9ed680b2aec05e096b59ab90c3aefc434488e68e5a63

  • SHA512

    4810519c985bc08c70763afc46e73423c025b6e2db77be0919483c4cc27bd682357f2efb4c85c2b40f145678367fe089c5d70b3cd82e19abda22b63c023a06ee

  • SSDEEP

    1536:HGFypUtU6SdWIou4QpsXsncbf5rieWqRZN+1E8CHnquW9WRuVGw2ri6:mFypUtU6SdfvpsXscbf1iebNlK6RiGt3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86a3afdf95115bd1f2366943e94f9206_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    94af9849c877dd5e2d917c3b91cccf0c

    SHA1

    7743f6d6e79a1f341d54d4226cd62340ba27d1e7

    SHA256

    69c5d64dad3018b608c373b5d6bb28a927be0eacecf06f9d317d5e43796be135

    SHA512

    094859aa0f09dd36dcef6cad53c64c26bdef7880031f47f5bc91d77abb4d26459fcf923e46f037cd525eee70b213889dca4caf7dc8f762dcf035195836d4994f