Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 08:17

General

  • Target

    b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    b288450d8a187210ec462096f9e53673

  • SHA1

    074061811479809985dea2c8b011432bc5dd60f4

  • SHA256

    4437f11b5d5f410ba3f79e04891b84eec2d8074389fe637a71829199a485502a

  • SHA512

    09f847d2974aafd9964c57013cf1e55ee359994413e892071d62faf5b75dff571d5ed5e76df3eb44c2e331344e747181060b4673088184ca4d0d41b3124067a6

  • SSDEEP

    384:VzDL2Be8uurz1gTvQAEK02qwlUcppYAj3dzsUHfKcZ0C0wrQdeqd/SmQ2URRH:VzD6zxrz1yvQAEK02qwlUcDYAj3dIU/l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5e7efb1c7628ef8073c6921ebea581f5

          SHA1

          3d1dcf49c8ee0a09c6162a34fe82a0fc39798577

          SHA256

          e09d64be8b9641d56b5e92ab400b46c23ab698532a1136a856101f877e2fbfe4

          SHA512

          e1c1aeed8aeff0f83f3cdb7e0c87291cb3e24d27ee7c0e84f7614f73ad8e8c01b8eb881db39e6b99086571725b5857423869fc8565731dd603806698d1051b48