Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 00:56

General

  • Target

    a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a34230876f7b2b6bb7f2063e6d5934e4

  • SHA1

    cc3121788c2b2f793298958264006f019730588f

  • SHA256

    7c69ad4740e59a4245107d7d628199fd68f00a31f734c630a204cb52b6f4ed12

  • SHA512

    b326f55665d81c2bc97202029dcc8615ffd3315073aa472e77754a4025750ed7da1fa95ed4f1cd6fdf387c95f5e52ca83125a43569311ce4ea44f9fc5b119d0f

  • SSDEEP

    768:KgGzpDwFIJyUkSX+DXAU/FfrIZN2yCG6AcGhSUhhYX9Hw8dpXmw0J7Rupc5:XGFUs8QiIbHY6Sx8J7Rui5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d66d79cb168691ee464195954c08f7d0

    SHA1

    623b5c1be779dcc753190c322f493276a4c07b39

    SHA256

    bfbff16a6e560c90f0f863a042b3c99bb3a1424565ed2c945d2eb867507da3d4

    SHA512

    fbb1e25c9da69f867c6e2c39fdb2d76b280eabd074d43502a2b2344c9470f39e61f5a2c3f4472da4c32aa23f7102e80911295adad165574333d16daf9e0fdd80