Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 18:40

General

  • Target

    9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    9f2cb530b8eacbec5cea08ce8526dc8e

  • SHA1

    57204ba04b930990a4e30025a40cb7e402bdb1cc

  • SHA256

    d90df628e19960d821805f316c2c3dcaf2dc1edff3686d7f24045f154f3d3ded

  • SHA512

    cc3d4c88385bdbb22414e9fdb1e2bcc1c3ea65a7f8071ab3cac4f74bcb679b4fb676a961484a27e166bde5bf5a5eadea5558414cad5421ccf12c51c8e4686f8b

  • SSDEEP

    768:xjProaRMg8hyyBoulcefn0GhkpkylE1gzJ+EBVO+OrpTO/WOl+lQIVhV9SBRpXje:9PrpZ8hlBRcef0vkylE1cJ+EBVO+WpTz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0ca6ae09227da4d80e8cd96a79500fba

    SHA1

    55b66f85b1203c3ebaa0524be1142ea75eb721de

    SHA256

    8405c2d06ba80714f5264f4fa5908e4701377b0e447dc39b61ece6da822652f8

    SHA512

    56afb49b02edfd3b2bcedd9797218fd333dafc8839e64bd7bdb1e4ce2efe04a25a4e0c23951605d452e565a5420e3e4bdaeeb46ea4941762268b2f9143c2eb16