Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 00:17

General

  • Target

    0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    0b77690a2386300b32a8321b6870ddcf

  • SHA1

    73256c15742434f13b8a2c6ef1d1ad02060a2b17

  • SHA256

    befa9b18a42de6e4da7999d2ec09381c5146aa2644ee358ce456d0cea2ecd1fc

  • SHA512

    065903d15b9e861a30c5ae457da2d9bc612d1a40c1c8e78af64dd29930f372255d854bbc82f2b75faeb7cf92c45a6f441277869974ac921d299ecfca39b8d051

  • SSDEEP

    1536:taHZdH0zJMZXHLoVa4EAA0oCZuLzIl4WGpOKCW2UTkYERiUM8AUb:cLHBZXHLog4EAA0FIQKwuxERrM8/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b77690a2386300b32a8321b6870ddcf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c312aee53f93c2d69f3753dd9e44eb61

          SHA1

          6aa5f19630cbdfcd88840b3697c30ea3c9450da9

          SHA256

          8edd0b48eebe8c8683311b580f7be9671788be9487aa93ba1ba0720413d9da5d

          SHA512

          8ac7c9ab4b53a55f7daae6859914f79b98356a35666f8c2797e4424412fb521d9645cf91cb3dee67c7c2dd16cbdec011ca41fc72af9c5ffed82e5dbce1af2f24