Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 15:56

General

  • Target

    a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    a65f05b02e058ffc04781da666b3fcb0

  • SHA1

    8fdf95c32b503c2a03dadec990f32a0fde408aff

  • SHA256

    f5daa17bbbc2ec6479d2b1da26fbb4a71eba27ea774720fe459454e28bc51816

  • SHA512

    99bc61c4861fe22031e2f30dad82cc7ebc5b38990e4a4d1b8573b8b320ce41f2721a69663cec879b7b2f001859eae559b3a37c898336df0854d5aac889ac0962

  • SSDEEP

    768:EgGzpDYpi8zlOW2F8PcImpnncjdmZ7YEpLf0O1sDBvuzBur/iZgS:xGFUpINncjdIl0O1sZuzBk/iZgS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9c6955edfd17273919c846e60d7f41ee

    SHA1

    aab1749a2f1132a03c2406959953bfb05de7a439

    SHA256

    227239cf3c7da79d2bb6b4a8f87552645be50b42e8ed67768e87ffd1fe080f6e

    SHA512

    82dbddcb3fbf11dc3392bb397cacdaf136cb7a10edf0238d667ce4b94b6717b443fb7eb179a9ca0e1107f1f57c0a8259e516b21b4c61950358d5e49710114fad