Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 14:06

General

  • Target

    22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    22a0b7bc33ca5dcd01459694750930bc

  • SHA1

    dd238588ea82391333b8ebb8aaf878f18f8e79e5

  • SHA256

    d4f963902dcdb07d6c34980804aba198be3c3fd156930838a65992c815fa6781

  • SHA512

    1a9426dbd37a5369de8d5c00197948558e354aaa217134a4de9b0ae781601bda515e24b98dfa0658cc9b4fc9be746db4cfedd473941c7f9fbcbe446e9ee2d248

  • SSDEEP

    1536:EhXI05qMz93jcRB41ZBdc7xVM1X98WHR6bi5cmWapOtQGm+9aMv:aZBpwk1ZBe7xVM1NjRy/7tQGm+T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    694093f53d4c88c6f965a6e432f6718f

    SHA1

    7edd59d6caaca11638d4ac5a4590605105786f2b

    SHA256

    f5d5ff8d224647d94e2986d7c266f288ab779cffd608108982bf8aecc9cc335a

    SHA512

    8ae6e9a786a462e750f284676a39a572f3314ab584d6d4de0e869a76178fa7e4110afe111ab2bf516ba0a4768bb3bd035d3354db0102624ff793de039ae561ea