Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-06-2024 01:04

General

  • Target

    1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    1030d06f99aa9076cbca42c17fae145e

  • SHA1

    c8e0e1afe3ed136afbe5e7925b4d026fdeba49be

  • SHA256

    97a05dc5a07f12230289dc6a7f4cdf62795a5b19c73e79789b06c8c55e6d41b6

  • SHA512

    b1eb429e05c64e64a6340d8c3d074996c83213f19526a76faaeb65e257283f214fc4a58a2a8fa4da01d394249045deb9bb47e83fbd29e78c19d6761afd5fb788

  • SSDEEP

    1536:sppqHPO9A5sS5FMoAB24UOjSwKNCvsJjHW6pOu26Wq40WuAOzyP:Wom9A5sS5FMZB249jSDNBxcu2WHD2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    45f3a87d34b806854e1eeef671af0ed7

    SHA1

    872b502f729b6ec14f5a47396dded8770f55c3eb

    SHA256

    ef60af30c9087eaa67247d8f0164be1b8975e470670ba4fa5417c9b23ad41c9c

    SHA512

    6d8e891f6ee9aa656d8bf6a71853df58e70b742f938c2220af10ba568aab41e44d99c88599b03a85821ee74488081bd23c7edc6b7f03d5d6da4a898d1c6f1acf