Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 19:49

General

  • Target

    9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    9911d00409e724b286c3273ceb7500b1

  • SHA1

    e763b58650264c642b399634e235b421ed304432

  • SHA256

    1d519ace1f8244695059ac3dd9d255b444aa2df044b93534813177f1223e3c4b

  • SHA512

    aa77b02e0e9285e4bee5939351b94a1a658fea0b8a68da7177f84b702d32779f7a126b6bd986a48a02876dcbdf712df72df9bc5643ba21c51ad9cbef3d583f99

  • SSDEEP

    1536:mGFmtCeP8OpMJKza5BiVDZ3rtB7JrAF/fM+SiNZcar:/FmMePd/zH35BZAF/fM+SiNKG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          db4e8b64b0ac0cc99e7ddd6d938b3118

          SHA1

          cab9d06ad5df9a3094eda814126e6fefb02471c6

          SHA256

          e7ca37c17f753b7a53abd8c056b7702e9d8942ba6fc3d89b16bba8c5a399fa8f

          SHA512

          7c70ae5b3bb1de083b899ff1053d629fa29a508831291cf484d498bf490d76c79fd0bdec33f033d14ef14d413504b657e8bd17001811318564f731ae71e125ae