Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 00:21

General

  • Target

    0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    0b7d00beca7f867ef633c0ef040d3e5b

  • SHA1

    b64a567a79e7c5544d6fa2f0a8d9ccca1c52352a

  • SHA256

    de56547edc340271a7410184883472ab91374cc7392d2f17c560e86d042d050f

  • SHA512

    53214d6001e41fef5d2e921ab681e0cd9abf2adedb86ccddded1262d95616c23bcd1a41b25e847972d660dd47271b9cef644721b23951ff8171b37e7fb938503

  • SSDEEP

    1536:38Twamwv+ngiiqcKD+IgqLk9SmOP6vPDEGFh+ldWCpOViIW/BHhFTUrcV:+pggiixKD+IVLwPDEllqVivBHhGm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b94439ea8a196e0b8c5e092070c9cd2c

    SHA1

    7d975b7c3c43e93563c81f087204708d72e1ae4d

    SHA256

    1ec655d465cfbf80a87753e8d2a1bca1bcbdb152c4fba94126972b28faa86547

    SHA512

    81236f7ca925c19fe332cc1bd0a0959ed81490f9f9a9bad4d61a4cb4fdb061d79c2394217bda1a5c3136165a5917fb59bc7995893782f8b99893d2078b6a089e