Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 02:05

General

  • Target

    01e9370f0e928137496d986cab93dc64_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    01e9370f0e928137496d986cab93dc64

  • SHA1

    dbc093c129999814a4eb96ddaec097bbc647da34

  • SHA256

    6b775046603d2460e11d2a89427b5a84f207da41b760dc61d6f2f2ffc13137fb

  • SHA512

    3706252df0027a3a6bcfa2336d49dba668130b669374bcc5aaf9c7431f5e67833f8eb018d5164a4cc6d1e11a569749ef22e3ad2daf1cd2eb0d4e0c08bae312c7

  • SSDEEP

    384:4ONyCeewIjJizXP7PbIDkLbgAUqeRr6EA5j//xPUKp92jdrjKRiTTTjTK0MJuav:Zw

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01e9370f0e928137496d986cab93dc64_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2276-0-0x00000000025A0000-0x0000000002616000-memory.dmp

    Filesize

    472KB