Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 06:48

General

  • Target

    24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    24ffdde88417a9dde3d3f2fc4474be2b

  • SHA1

    ff9052acd9c24e3aab7a1b2ae8e74fb052ba1c31

  • SHA256

    0e2b8e7068b32640d9683de89aca37170d7480a9afad5ddd122ac8c649593188

  • SHA512

    fe12a8e2246a4c4cc8b635cb3a65b73599631107175f030ec9406d6946f06a1c8e9ec0ca8c80eeb89ab1b5bf0a15e34e219900d8c15cee15952ac42e76614734

  • SSDEEP

    1536:JRvDbLe2uXm35bqKNZU//k6yPmU5a73jLkSeWOpOaZEWlRjQ32fUFdG0J71:fvHaPX+5bqEZDPmU5m3USzaZ82fUFg0f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          97e34385636d46d99521d4bc0f1d9c38

          SHA1

          6b664311a99d99f0a1f1bd89b18b6142129933be

          SHA256

          11c5bec311352e64ce22750d4849a9e876f757e2936d851028db86c425e3d584

          SHA512

          cd0a8dd8f36c269171c9433b20a96aadd60bce0388bed16e0a267787a3385d3f880d72eca122c493cbc230dcb2065e1baff7359cd1414074a379850f7e773a7c