Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 03:55

General

  • Target

    a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf

  • Size

    352KB

  • MD5

    a3bf5587b11b6e608ae463cf53df8e1b

  • SHA1

    8c04815d7325d94c37e07df22bda0ce6d69def5c

  • SHA256

    9eb7ed4ee0232f9f1b8fb9fcdc8df3e0388348b92338bbbb5a8135764e31f04c

  • SHA512

    3fdd90e3d5244f084b4ed5b550e9c2fa0b2be88581983d72c4b0d784cb95018b13e71ae0ca27932793fcc8d7b0d3a0c2af5b2508596e555cc5949f552f949f66

  • SSDEEP

    6144:ImWs1aY23O/wRfFwF/W8lXM2SOgP/OD7irNhz3jALL9z8PdOM11YIYWAZmgOJ7:Ic1aY5/wRmF/W6M28HOSz3s3x4dOM11b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1896

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          196e3027e2e1b18f554a3f593894df07

          SHA1

          912e5cd7cc390ffbb8cc672f5f73538bd2bbbfb2

          SHA256

          e68a206dcc55d618d1eb10f14b85d58440b30eaed5b5acf61a4bc4c8bdea411b

          SHA512

          9d504f92da1be4efdcf21ce9466a6f785c606240f95d40a596d02689c9bfa0686e7932d5864b1e31c5fdc1a15f0780ab3f4eb38f3426dbb08cf2b04649e7e66b