Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 23:28

General

  • Target

    26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    26a111ab03c07472e895200fb44d848a

  • SHA1

    977bdb2eb4636a979c88e9a767a78504a4ed45f0

  • SHA256

    92e9b9eec71b54c03afdff474f94bcbf63d3a073f57f219b4043c19f5989724c

  • SHA512

    9d04d312773f99037fa5bc69e3c1e45a295d653054fb4456c4e17e1eb03343cf623dcc9e50ca84b82a9ec75b5193e6309961d9102aa063ed44888f4414cd2885

  • SSDEEP

    1536:7/hJRgIxeofN2zOFDWHJrSTY6HNSE7PWHoR8FBPKWxApOGWXi4/8H2:BY8bFiHNSTD374oRsv3GWXimF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    01272bc97b8e4ba2f5deb08f7e53b4dc

    SHA1

    df2a50341f00b9185aeaf9f002b32422288bccd2

    SHA256

    dae58114d0be314ac54186ad268037531dd5b3b58cef95f57fb7175e10b2b41f

    SHA512

    a375b84c03f4efdc5fd48b1213db85300a591355b1b547ab1d8d2e466a9a2f6a404a29d4691c252410be93a5ff77b0f0192df079b5824528404c052efc47ffc5