Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14-06-2024 07:56

General

  • Target

    a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf

  • Size

    27KB

  • MD5

    a89f5b7ffb047eb9ced6be558a193329

  • SHA1

    d344d4aa3c5f3b6fb33a6894b4a795363d2b5aa3

  • SHA256

    07deb5225c2caa50c084c2b7ba8593e74d21f54ff3f58f58fe6c83b1cc871663

  • SHA512

    8c35fcf432bb8004a880112f5b2f343055c0067209db590d15e9823a118081cf15d1fd7189db8ee8fb0efbb9d9f995e8cfe37e5976aa55467ab25c36c4ee6aff

  • SSDEEP

    384:J/QON8MUG6Qgw0JZCTzz02YFnarX6l/6c11zW2cLQVlE62D2vSM8Iu5DwyCUS2ZS:JXuMZmwgCLWargPG2062DASDzlXLeTt5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a89f5b7ffb047eb9ced6be558a193329_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    998bd657218acb2bcdc5c0c1e83a3707

    SHA1

    f9919a4374dd8c53de1bf1c30a39d8226fcd6d6d

    SHA256

    4263d71aafb72cfcf29032eaf671b18112848b0448b0ddfec1d5eabb47f76a04

    SHA512

    381b7eb364c37516d244deaf6e7f7522c2dcd3eafbfcf5f1417c1abace836e7447971b682f10e18ce5f070b414054d4653d838ad81d516764bdbac9c6ea80a73