Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16-06-2024 14:24

General

  • Target

    b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    b3f87d8ccede7cf3293b425c497fd517

  • SHA1

    fbb001e28b2ff899d82fa56dbc7d9ea8ffa56f46

  • SHA256

    c305dc9b0c2ce408e79e9b9d640a4b8efd2f6d33b9bf0e01777d9d0df8ef507c

  • SHA512

    2929d310038f41fbb098aab9adceb57854c615be64f005221235e199be826e4711541708fb8bac8a88796a7c2ef77fdd7b703298dda545bcd6686053b354e20a

  • SSDEEP

    768:6XuMZmwgCLWarxE5HpxJ//CubdlHqDwf9rFyebtAyysFivwkY4Ia5tlp3iIXTffZ:6XFZmGWSSjJ//CubdlHqDwf9Byeb6y/m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0b56479fd2649f3ae31069c4f4af1c40

    SHA1

    01a2b61fd36db6605caa058b7af0130f0bc95521

    SHA256

    eed8decdb892d8491c77d5c92983bf3e81d58813672b36468f447845316d17c9

    SHA512

    4b8382c9b49d1608ffad6c344aa763aa851068edb980e55ec90005987a1c6645c97f9c323a116559ba38866642f9e9d492a679d1c26ee75bbb522008a4e92f96