Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06-07-2024 22:29

General

  • Target

    296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    296d93ff07ec0d1cf9d0c7885825c716

  • SHA1

    db7c05763ce4d972ff5e5117d9582cd7be50d31e

  • SHA256

    9d36420096cc04f43bf41f5ea01c6bc397a6cec009c93f3a84332155f81f6707

  • SHA512

    7cea54167a30b4c4e6f0376619886d3d65b4c609c645c98b4fcb1484b95be23bee2c9b3336bc95d8267a3fa8814171e124778c856f612bd644d1f9fd6d0e7417

  • SSDEEP

    1536:hLeXk9SAMtTxM1+GIKn+U71/eSBw+WtILXXUN+W8pO7UZj:pZ9VYM1+Zy+UBqnIHUN97K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43993ffeccc4475653db3609cbc66a2e

    SHA1

    0d33781dcf64f03f6d5f585c82fafedcf4da7425

    SHA256

    ed5e23d8c3bf813652b766a76e6269a3f3daf52fc76fce3ec9c40dddd3c32f9d

    SHA512

    7fec1f7eda3a18ffc6077ed7fcfb27bbc449406f21ad82c0b2d32e2f9bb9fc206f6179210402108096fc128344bf6707b159a9114be92fd3ca41457047cedd4e