Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 15:43

General

  • Target

    0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    0963d2c14a4961fb006f2b3b4ffb4127

  • SHA1

    d02bb4a1157fc7758319997f1c4992b26f1c1805

  • SHA256

    065cc35286cdd978f68d781aa9f32c5ea7dc271164800cab32d5daefd45af1df

  • SHA512

    6930753477c75937e26cbb8f39d2129bb20376487ff650f0195e5e2b102948c49b3ade207ce7086f9281c4c61ea0ecfc79a8d336b4e8aa7cc2efaa03389a3814

  • SSDEEP

    192:fwP5uFm4k9twPfn6IBj/A+PcGRkLNnnE2kqzXEKPd4456StBvzOseYz:oP5uFm4k9WzB/AiRt2/Xr4QTtBvVeYz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          be424c0b1a3ab54f22e95f87b2274478

          SHA1

          9d9483ad37de65f9573057289e17c63992781abe

          SHA256

          44bc163882972ad5bc2ff743c382709ca5d92e12747f36de5505122c26b520e7

          SHA512

          41862fbe201cd93cfea0286ff98b2cf972234e6229cdb1da6964003697a740439f2fec0ba8f180c4ef6d2342f46b88d1faa3e2ca9099d3bd84b022cd9c5d89e0

        • memory/2132-0-0x0000000003370000-0x00000000033E6000-memory.dmp

          Filesize

          472KB