Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:10

General

  • Target

    a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    a70a66b201e16e699e619a868af7880b

  • SHA1

    0c1ece418c1bfb0f3c4614b627fddfadf9773bfd

  • SHA256

    b9f3f049479e25885dc494f63dc5516d895468c66253ba2fe5da044d073a2898

  • SHA512

    e7974fab8741e162fc18cdd42cc9ec8137b3530573cd079216392fff40f0f060925f3619645f43ec536fb1f8ab759e95b74be0b678b0b3a6a3650d4ce48d2e7f

  • SSDEEP

    1536:6XFZmGWSBHxxGrWQRFauQtXSir9RtXD4pjgZ6PGa/0nueHMIAB:wyssWIYu8XSBpjjek0ueHa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a70a66b201e16e699e619a868af7880b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e2fa139d713c3d5ee94d36761187b66e

    SHA1

    214d26118cc4fbb52195b371dc1d87c736784e5d

    SHA256

    9278a0065c92eedcbab28dc54524d1a6f827c3de9bfec2535765cc0aedaaa355

    SHA512

    512639de59d010a5c2130ea7214e7717d0c3f43a5b83d9607db82be49350fd656060919a62c257fe44d13a6a7c26436aea291be5bb237c95a448657ffd3bfc41