Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:00

General

  • Target

    a56d33e70d69aece7311a33e8a453424_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a56d33e70d69aece7311a33e8a453424

  • SHA1

    7662d2bc07e4894824de8147dad47a21e97a798f

  • SHA256

    8d50828d3b4455b3504ab592faf125ac66e6c1ec31ae2cc78c9c52cdbee34c5b

  • SHA512

    ec38ddfd21bb890f42ccab13731a52d1ab963d34b56b632ab03b9db82348bb4b7ec55cc635be19f6965671e16999ab04873e57e198d7388fa31f2a32cee2016f

  • SSDEEP

    768:dXuMZmwgCLWarDE5HpxNh79NtsmHz3uhAgMXf49JGQ82Kb+j1z+pg8gi/TFWiEXJ:dXFZmGWSMjNh79NtsgehAgMXONeg1Cp4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a56d33e70d69aece7311a33e8a453424_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    73dc248025637d1daf5fcc648c26033f

    SHA1

    98ba4d21fa9214d8029b2dc89cb94fe8236b27e1

    SHA256

    0827f06532a777bba8933896b7b41c40c4846ddfe7b4d69d4fdcd8f5dd45ea05

    SHA512

    fb6b5ce0aa1e62f326eea444fb06dff2011537c41afb7281d7e4e8a4fdde527a35fa32c4f59a6fe456ad254c806d1eeec3ec0898a58a5fd3809a4ef7b477d566