Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 18:29

General

  • Target

    9f2557561963b5f8ef7301840ead9cfa_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    9f2557561963b5f8ef7301840ead9cfa

  • SHA1

    b6ab9980fe62e89b6038d7de25b98a34abd39cde

  • SHA256

    cdbf2bf68af48258b1c5699dd1703854c825c4c04e74f74e21152216b2bb0a9f

  • SHA512

    8fc014767e306b6cf0b30de032c5e932a32384c61612d35ff5f027f7770abdebea65ad891eeb8615a1560b15bbde519869372d649218f4e3482930f62b60a2d5

  • SSDEEP

    768:GXuMZmwgCLWarYLcHdYHcJb2h8hcwLfu1uvRIJwyoQmCEm6gkmQhxPIMLSzLp:GXFZmGWSYodHt2ocwju1uvRIJwyo3qkc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f2557561963b5f8ef7301840ead9cfa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1fd6867516969103e84a65a0454df811

    SHA1

    a177a62ecd2d8381b4521e6530dd670642a182ab

    SHA256

    f2f42f2615a4e31cacccb92040a62479cf29103f20c251d9a1ac7bd1db202dd4

    SHA512

    3289ff9754c1ab14331f17e06db0f04bea5c7a0d8a5ae7f99f968c0eaf3c554d1efcdac9b220bf531285deb536ec63ad5231ca683798af5eb2543f0e15cb562d