Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 15:38

General

  • Target

    a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    a12e4d029da79597102749b6fe6f6aa7

  • SHA1

    0e4393f6bcdd0d727d754bfe85f5d992789a5f0a

  • SHA256

    c649267a327b763f89b4b4a929eb8189718e886332d725e1c062f9db144a691e

  • SHA512

    6fb41f3c7c177459a3458decc979dbab75113d29edbf3fe6a4c8571ddeb1ddbba3c91baaf070e299af14bc03861a29e72f1502c01d159b1060e265375928009b

  • SSDEEP

    768:YHx7Heubc0KDapEVt/u+qNdBFpOayQ1eh72E1FaVXVtiR1HPeVOGceE5NXuMZmwu:iOVdu+qZ7OayQ1eh72E1FsXVtiR1HPel

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    62befdfda0c3390926a9d9b6eeba33cd

    SHA1

    ece4d4e086408b498fc16312ad76eb4af3946423

    SHA256

    3f89eec38559295457842c222020006916a2c059c0255c60ae3ace04ae67f83a

    SHA512

    b9f68e91dce167cf1a43eb985a2ef8b85ad4a2cde5f67ee592f23c39b9c1f42b32b1179711ad7fb9860540503aca10fa924bd842815223eaa30d536afc04596f