Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 17:42

General

  • Target

    9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf

  • Size

    18KB

  • MD5

    9f05637c275a9c24552560f786af9752

  • SHA1

    c5ae75f4999b4a3ef479a96f2adea54d02bbb3d9

  • SHA256

    37cd87215fa2d0c11f46ab5c0b8cf18e4b084a67b252e17974adb709ab25b9be

  • SHA512

    f4df4caae7f1142dc7b2d5d6e01f31c384e6645c2d59f5630be0bca3c5d78ef6e1e2a69c553730af7b10fe78cb98368184dc83f7c486005c34ad8ba51c3d6753

  • SSDEEP

    384:VzXjKOUQF3c7Q+fz18MjNF/ECUyNt91LkqG6H0UGWQdA+KnHwuYOuDOsJyXxiIy5:VzzKOUQFs7Q4z18MjNF/ECUyNrBk36BE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    968bb32489daf62bfa8ac3cac7b3a8b4

    SHA1

    5820f29f0d162590dc93e491b0ea81e5804eab58

    SHA256

    f8e5db50271b8d64de70e0ca190a2b4051e9b9fd3b1a52260cfa0cbf22a2caf0

    SHA512

    99990a0e6563f00cde9aff0426004aab3b841bece76697dfd134057d5905342abd402de1d94bbdda58ebd4f814c17da7b7eefe7bb35b90089f8d414bc7db69ca