Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 10:45

General

  • Target

    080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf

  • Size

    66KB

  • MD5

    080ca68f396483f97d7c7f8539c57703

  • SHA1

    10e84e90707b0934978f10e01e48bdb3d3f8d574

  • SHA256

    82218f192e116366f728086c8eb92f92f9381873510a423d3252f9d1ccd81f86

  • SHA512

    ffa78d6a7d0100bf7afdcfa56cce54e3985698a33e13ab4e4eb1f232e6287134b616c68d364a691ad012c91084263124e44a40eb838a1707d66db7c6234c6cc3

  • SSDEEP

    768:TOIhfvzCXFEveAGR7e2B/OmZesKeQsDK6EojjCqKq2v+n4dmumg5VYk84Ge2eFQE:TRzMv7vBmmCeQYjLz8JCT4TQ9VJRly

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    34986ce695993794e5c04331d6f9f21e

    SHA1

    e7be4c5b130808456c0eea00bd3b551284cd2deb

    SHA256

    3cc347beaf7642bb0831ab946b453268f882796f347a1777daec1a6253328b60

    SHA512

    0595c0c758800fe03eaafbd2791599276b88398e33e29216edb97ee94806af4ba09ff9c6f36d80063444fbfaf3f926c5ea39ff1ddf4df1741e6346546f267f6e