Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 05:12

General

  • Target

    b1df36c95531e9692551307ba1221b6e_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    b1df36c95531e9692551307ba1221b6e

  • SHA1

    d06c312286424a1f3148021ff677289f5255f5d0

  • SHA256

    a69512b1082d7bfda8263caebe685d6f7e6ebdb327ddb6efbddd2e1874108f2f

  • SHA512

    ffd5a9d6d49d96f783af029966512c40dd6e0e24633e22563d05cebd53753936afbbc7fdc0eccda73dce8096a56f64ef83a7241d831b0b4fe295926501fcd8ad

  • SSDEEP

    768:BgGzpDPNWbnXmb8OZT5+kiXT14Re1HjeGWVBLh9EmCAn3Ph01oERNP:yGFbsqRkjeGqZ+oUoERNP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b1df36c95531e9692551307ba1221b6e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e938640dcf69ff9ba74e2377d61bfd38

          SHA1

          8e656dd0e641fae52969d0348bd9839fc7dd6a70

          SHA256

          99398acd6c6acc488eb2ae9dcece6a32519688ffebd25427bd015a57c3419cb5

          SHA512

          6ba645266fc0cd78d2b0818eb7c399770be86321cb6b0148d16445ddd835651afc3be3295165e933ee0f18327d063f248c4dae296d526f36f5c6a9a197c292b3