Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 08:53

General

  • Target

    9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    9131058908b01e3d1fae18793f2982df

  • SHA1

    5023e277fdebaf20dfda72e96b9a5c0d14a60703

  • SHA256

    d79b8e95ece2cf20aca20ef60a83be09b41e8fc7c6c05e69b1f9047b54bee268

  • SHA512

    26c39ed3a1da91aad96ed3ddd4997fd7506e1d03c5474f5cb7c914ed16bbaa95949c19bd628d50162515bbfdfe26742ffbc0055dad64154effcccf7cb9489e55

  • SSDEEP

    768:YgGzpDXI/QSgdp6+MIWrs51b/UO5vUikIEcRIizUKoDs52bpQNGB5xnQK8zVL9X:1GFKQp0IWwTbtvops521Q8FMzVL9X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b6b5647d5b42762508836a5640e422cb

    SHA1

    6d0a816947a04e66ce221207e57a8ae2e770216c

    SHA256

    9fa489a631d450b06d2d2adc2464c5773e4dbc77ef3d5927d6f1aaa88d8fc9ef

    SHA512

    6edb462b49e4d4fdb7a3313ba70746e2fd3622a0b0981855e8c7385aac256be5918c175775ca40b5e77af382ee204c2ce631d74cc731bf14e8ebae947fd16a3d