Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 01:22

General

  • Target

    a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    a358275ae81bb5852d2824590e97e458

  • SHA1

    189e4128e9b5a2fbc240e73aab706c1a318664ed

  • SHA256

    946a31a09ccdea04e21120f4ffd344ae476f339fccced3c7c659768d19ce6090

  • SHA512

    c9332d0114179f00220f311836a845d0472bee5ee1bf9b6888d2ac264e1df66a142b954ab8ee633c4f9aa1731421a2afcead25276dbf79fc59b0a0c4e80aed1b

  • SSDEEP

    768:KXuMZmwgCLWarSSnwPEnKRdFsmh6bhSXxsxooZSJMW8A+2y6ec:KXFZmGWSSrPQIsmSSXqjZ0MWNPy6ec

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dcd1c78c465b6684354dc191d50aaf33

    SHA1

    2e8bdf1e714fbe7ad335458bb9c1ddb7055b3435

    SHA256

    b7e338f0a04c7baaf0e96175336f3afb883b10f82d6f767b91ff0ad5dad412b9

    SHA512

    d579ebe160a9be77be4fb0808dc226f8df51a03d398233802abf71bbc245c4ac071f28806d97bafedc4104f303321a86137888d29c1ceed6dc8d5f852fe5c766