Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 14:29

General

  • Target

    a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf

  • Size

    62KB

  • MD5

    a6069a7b5744310fea9fe9965f97aaaf

  • SHA1

    943d1fb0a8b1c8c13080060767586f4fde2a797c

  • SHA256

    ada5bec206621f65dad1795a4f00ca80e0a444cfdcb263f5d5611a8fceb74c6e

  • SHA512

    feae6e5a27d34876603cc189dc0f9761cf5e53cd4d7ba86900db0352705d2f904667158ad8991d653e2ee486838f17979291e7c38632dbbdeac2f80a272f7b19

  • SSDEEP

    1536:fUhBRuXWPlHkUpv1Yn8tO0T55eOQJA1EOYH7PB2C92SXFZmGWSRV:fQEwaUDtbner2qOYHdX92IysRV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d057a833f9adc6ee2744bfcab518cb2f

    SHA1

    7db66e18120fa1463df35ccb234f92e02434ad06

    SHA256

    d572ea25f4c0ed9088d1dd8029a10a3cf09f359a289c0c4161472e031d282ac7

    SHA512

    6f57f87477c54c3774076e44075ee0d94ee3ce8ca1a5b82dab0575daf82f5f822a4ae7a7823dfd3f26a53745f88dc99ccef609e2d31592b7a3d7428508d09aa3