Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 07:31

General

  • Target

    a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf

  • Size

    108KB

  • MD5

    a46fde59b6471afd631202cde7c894f0

  • SHA1

    1e481da59783ad2abae030bd4040759a61afcf0c

  • SHA256

    25a98a888bc1b3277e41a236908b4bf2abc94db8124355ebca373d3c761e491f

  • SHA512

    c88b38759747d23543dee7a7708212d024189ffa65a378fcf265b4fb80724691c66aca3926de1d20d72bea4bd8fa4cc06d6c27a7fa37fd4e4c84562964d7fec0

  • SSDEEP

    3072:skwqaRguQ8s8ymGmr1UuZryjrbvWo9EAYcSXuIwe71/KeysbL:3naRguQ8s8ymGY3KrzJoXuc71jL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    71aadd8a90cce294fdaccb5ee6e79df6

    SHA1

    c9490ab20ec50a5b90cfcbc0bee9eb5b56e29718

    SHA256

    143fdaf9e6aac353c7cf668ba0c1a6d8fd5f064f8ca28f67b424a488e550bb0e

    SHA512

    edfa61ac31b569fc957677a0b17540f6f0abd5c37eeb9c0495cb38993688d50640b5e4e2430b2117ddfb1cd66f7d6bfa5a3b0a134853251cc02da4b05615b94d