Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2024 05:14

General

  • Target

    031aa2c78b741169d9731d8602284c8d_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    031aa2c78b741169d9731d8602284c8d

  • SHA1

    394924f4a9058aad0479a05a6d049f956643f931

  • SHA256

    ea72245bd95f233976992311a4727a034d941178713ee8f9666dfa6a5daaa0cb

  • SHA512

    0bfae558a4a366d20500c7187ca38eab27a08784cb7d5f3861593c6261e590c17e7719a17eb460db1d64331a488000cfe8770560b7d3adaccfc9d71fb6c8179a

  • SSDEEP

    384:bONbedw+lJ5mtim2CD6etk1Kt+UJUUpatXXM3:+RjpOQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\031aa2c78b741169d9731d8602284c8d_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2500-0-0x0000000002ED0000-0x0000000002F46000-memory.dmp

    Filesize

    472KB