Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 06:46

General

  • Target

    24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    24fe9d4c825e597cbabcc15cc6d0fe29

  • SHA1

    e4bf5690d3973269f956c53951b175e8b793e427

  • SHA256

    75779025a945f9c602d5772e0936e00b7d20af1ad77d7bd685a2ce5e89e6071b

  • SHA512

    854bb3868f5a51b450b9577c22612c67806160a4742a6de6922219a91134fb130e67ea5a3ca88d07fed4ea98cc9421e34a1015b617c61eea766f14f2118ad4f7

  • SSDEEP

    1536:ZRQRrgsm33b3Zd2bJXF1T2RkHQSWpO4JiEz40oqySWUpO7JFg:7wrQ3jZwbJXFR2RCl43LyN78

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b53160f058102113a236e0a2a0cde4c1

    SHA1

    2f11e21da378405863bc15dae4ceb99011d2b27a

    SHA256

    b179f0f11b90202f034797eaeabdad557912736f8a297b7844a0b174f9355941

    SHA512

    be403460f4d7c9462de13597bb2b504a3e046ec72c1a8838da2570d37cd723e86a35332050b3223a13134c1771b9e262ee6fc7a8877c9653b317da6f2e5a9177