Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 05:53

General

  • Target

    24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf

  • Size

    63KB

  • MD5

    24d9f590cd14d8aaef054d438500354e

  • SHA1

    4f3328388f14b691be0c6669b9141d1cfd97350e

  • SHA256

    ec98d630248e86a618b6c9a45e89cc2af10d1e85ad9ca888177a7ed7afacdc01

  • SHA512

    9d4c1e353232ab834a271d2771b948b229035d40e389d275519769cca7edf633a4233291b6477b3b451c4753f5a32e968b5459ffe0c7f2ac66342a034facd4e3

  • SSDEEP

    1536:+NtGGtMd+Jg409BE4NgmGAqwCt8KcDttQeYSEqAdsVFWHpOvDkBxQ6:zGtK40gXAot6DTpY5qA+jvYS6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0ca616a7afa5b51291591d94ca4c58ef

          SHA1

          e4078e5e4b2d5d1b7d51b39ba54637503a60700f

          SHA256

          2193aff036b44f677a9f469cd243aec9fa3fdd5b74958d0232d374a59c74d181

          SHA512

          eec2daadbddf814eb4a85222afb720c01242b0b7914f88830a6c1f8994a535b304d07bf9f7e54e67e4a6bb46770547dcad84ef5ec40769163d84c63a345a6ae5