Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 08:43

General

  • Target

    a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    a0127ad9af7a896c31efadb407459833

  • SHA1

    2ceb8802f6d8caca21c25d7c3285cec44f996c39

  • SHA256

    406831ff0062bf2e944ade76ffb1d2151d3648e4220e0f1c97d432aeeec1f8d0

  • SHA512

    309af1c753d836e0190d2e1c3d8ba751c550284d11acdf7a6503497c060b1af0fcba78c7807e7dd76b0e6a4b09ad8407bea6e20535ce3af049a564f5de398f13

  • SSDEEP

    768:kgGzpDBp70y0lJQ3n1SYyLq27g6lipSBcydghciYCnkxz5TWb9n:RGF9p7m8pSB5gciYskNKb9n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0127ad9af7a896c31efadb407459833_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    461f05d7c219ac7151493b420fbfcf7b

    SHA1

    c313e08799774372898471287d476f27090e5c66

    SHA256

    96d2755145c32d1e7748f1459601b0991dea978ab99ae5fad3d7f295c6455e1b

    SHA512

    856639f283a99546b8b857b7d791aad24d9362146889f7aa11d2df464285c46cf732416484487436d483768c651d33dc941b0295eb8b97760c902b7dfe14dd77