Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 19:16

General

  • Target

    1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    1734f8b3eb3cf3190e36e7b811f01a80

  • SHA1

    01450b58a2c3496f3b7c2fed00ece71ef37456e9

  • SHA256

    6c8975c8cd0b415715f75902954b523b0c7185fbfdc28cc8e5195d8d5d58c49a

  • SHA512

    220d1097f1159bae434d987d6f089c7a5614eb46e20917bf4c9dbb49039b74574bbf387c5146cfd7464c6848be8fa106b0aff572029dd7f2357e9f27f511d5f3

  • SSDEEP

    1536:YEIl5K7DXYUjhUSJDo9zZLev00WMtsZyQ0CWCpOVi75naYCwd:ZXrp8ZqvAZ30fVi75NR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a40aaa30783678719b2edaf5e9db8056

    SHA1

    38f48e9f670239f601519c1f5af942b787facd75

    SHA256

    ade126e9057ba1c7f595b4d6f1dc7a5f28cab1272d3a40d21ccc3a7674dfb2e8

    SHA512

    5085b6414e7180b4de761984e7b82fbafe63bdb0de4509bd1bd0a1759dbabc1cb138a0e5931d1fe9e7f791a465c960f694e000fa8d433fb76e0d254fec58ad26