Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14-06-2024 08:32

General

  • Target

    a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a8c0d6eab27e9e6d4743a83a77eaa098

  • SHA1

    0aa828856fad0985daa7a1c0b65b8afbc726cc82

  • SHA256

    79fe5785a8d6c7828781ba68d29ca1ab5194c727e6598d092cb57fb264d64ba8

  • SHA512

    881c7fe03947ac3375ac31c8da24e55a72f6cf3201a98b07c759ed51ceabbd478d6c5c9363e2744d53fe2b9abc9faec50f262c408be74050d7bfac977c96a6ae

  • SSDEEP

    768:FcXFymYtFMR+X6WU6XV7qLkVHzV6H6xU+u9F0fldudH+4nzNCPLVvUTMSsQ0Rfth:aXkwR+X5Xe+cQr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    301e8b4b3aff9c186ca8bfb5cc691c4a

    SHA1

    71261f57dab3c34921f1d561af9e5285cc852524

    SHA256

    4994680f5f510ccd726e2af2aac6944f560f1e2857d5abcb5d4b185220fa375d

    SHA512

    387f1ae0c98eba70e387a70a1aac686f61268a0a2cf8c8310308c26b05003d27c11444c24f0cc5d64e8b4bfb75c8db2b86d150da4bc5e7cf22c32363421fd4f9