Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 08:43

General

  • Target

    b7b562dd617bc53da73ac69f5c502203_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    b7b562dd617bc53da73ac69f5c502203

  • SHA1

    51f9e54a9caabad2e8c9d10530103287fcc380fc

  • SHA256

    4b18cbf422b34229b696d33ec7213b9f0705393a784302b57d1ea1e891e053e7

  • SHA512

    458236428b4fdf8f9f04fef7f31f5d28ad086a254bb6b7d8a891c54ededbe75584f5d6277f84e33459a835931a59954b0b65e28d8f2479d4decdc06a6946291a

  • SSDEEP

    768:KgGzpDJp//L0WZVJ9sxNMf1zY2qQ/kf+1SOcKk07Zp5LytqU8RnAG+m:XGFFp/D0X+1Sg3xytGnAG+m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b7b562dd617bc53da73ac69f5c502203_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c42ae7c16cd631b00115de5a323e5d60

    SHA1

    ecee82810da90ec8c2dbd7e8a68183a38bed8f1e

    SHA256

    201ec814e9709e0c6b60f20d2ae419fad61311ec96620c6fb18a887778d1d483

    SHA512

    3a8495af872761a1c5b8919707f0519c160eee9e09c8d68131507c584e928359b29550fbd935d6e8b2e27192737631c678fc9e2ea3fe55b661d975ca14cd173c