Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:06

General

  • Target

    a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    a706988c0e947a02dc0dc23aedda8372

  • SHA1

    ca33e4bfa0cfd9263b62f591d7393edd7cd76fc0

  • SHA256

    01e11d5ab87c876064221e797ced1e35884269ea2166947d0885518c6cb95362

  • SHA512

    399dd201b4b37bc6ba31b42a6287e0676a667f0d3d7672451a2d7883247c099949e811c41581f42deab8d942c09c7702c9c24f8aeb1ce602ba13fd482e312cf8

  • SSDEEP

    768:PgGzpDVpQ0Ncb3189YBlvIN1ovbdzPsLMuNDu8Dn1AJOkZnsnm5Dc:4GFppA89QlQHovgDu8JAJAm5Dc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a706988c0e947a02dc0dc23aedda8372_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c8fc0f0b3b3a2ada219514995b010f8d

    SHA1

    f8a6a6e61d26f1c4f4fe9b2e5f4ca1a03a7f6b2f

    SHA256

    f63b5300699cc66280869c6e9365b8f4b85b2216eee7d0d8188d6860392aa519

    SHA512

    bd37d545d6ce188491ed271f3b1f06673b0f36e51be54f8f0de1fd8bde773ea58a648d0ec662327c3be6e509b73490e1f62c56316fd94a5f7c5260b96d3c0791