Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 18:48

General

  • Target

    9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    9f3293f9d5d7e7720d3f146d44a11cde

  • SHA1

    a6ccc8e510733521f0872563f2081380f4453a2c

  • SHA256

    0088d23e7728514fe616f7c0fc19b2a338216551ba2d4db29e7245b89e948cc4

  • SHA512

    2dd62a090b302c63886d8d926c8e0703e999bc1e8dabd818f14e2b7006bcaf4df75e0945ef5d8fe9db4e2e4e1f0dc8ce592ef7c51cec37e054f3f1886b057d5c

  • SSDEEP

    768:qgGzpDu1Klo50CUYMQDq+aCtH5sOupn5zdQXeaHfsDwF7y/SYHIAS5tBwUNk0:3GFqtqMH5Onaoi7yaYoA6LNNk0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    652f3d0cd5a1bfa68ecc5d74a59d35b2

    SHA1

    084d1da692b770d0e94b4e7762f2482ac3dbedf4

    SHA256

    bf2456ebe29b9834de9fc4bd6973937d9eeb40648e2d3ead9cf339bd5d8fcd52

    SHA512

    44d75be8764793fb0005f436cc8ed5f67584f316de82be50f27e1610f4db937db37a1232202045a576fb37a73413a0d3829f44a4fc092f0a39c47e8641e63d34