Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 08:51

General

  • Target

    a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a017b37fb7741273bb33c002ba6bc32b

  • SHA1

    c144cf567024d9dd19193213634a660c16355d93

  • SHA256

    d9a6ee7e163c7e807ec29f20294c2c5440f9cc76f834450d5b534dd8ade88998

  • SHA512

    932af8d302509917a3ff83ad941d0deaf2827c9a5bd4856c683380863a14a957e20e8eae9f349f0f325eb552f3efe52cee9a19644067904632215029ac1f560e

  • SSDEEP

    768:BgGzpDF1BqES0hn/G+LWmnF0X0r30pozdQki+rMOp7p0ZIoBeBjYI3A+SbJ:yGFhBFuCkpKQki+rrp1MedA+SF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    945aa0d8a8a4a8ad4640dbea78e80b34

    SHA1

    677c11745779cd09c050b4fcb4ee1cc0ded771a8

    SHA256

    88a7ec9c5a01de1949ed7ef1201617ebbfaf9aae2436955802c91a734b2da8a1

    SHA512

    d9be0f324446b344cb52dc0ac2b2c7ca48165ab901e55b5b359d7614486ae5851dd81b3140405eff3f5d5cef1975907ca7872ded5b79ac48962f98c7a2da6498