Analysis

  • max time kernel
    95s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 21:58

General

  • Target

    32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    32212a19195eeef10cb7fa228854cb57

  • SHA1

    c142c8c462ee4c7feb02055fda352aaba160a110

  • SHA256

    36e8b4065861a39ecf0f01a650f298168f647716db3dab4f89b57294e09dfbfd

  • SHA512

    1494eb18272c306565769aee3a21ad1561dc27b3462b52af284066dba68cb174f5572b97f2c828ce9c5062f1ced2f4a046b6f38a0d071737f100c25dbb1dc7c9

  • SSDEEP

    1536:jPLzT6pS0yrdfdlrl2L1bLLF80iBP5Wxovsj1iLiG2pVpjWapOn9:nNhrXD41bfF80N7sNqsn9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          39f0bf0a26e512f2e9d1bccabba1f378

          SHA1

          98f58706a7f5227603f6f68290166f2d475f0bbc

          SHA256

          68cfc84031b764b0ccf95a4e436dbf67f2f2e559807bae375acc695f0c59b8c2

          SHA512

          c4b126de497aacb92eafd4c3d73a46d32ba141e79dc10093cfffb6d2f21b5c2f5b891d8aed2052a98efbdd3d151ffc840a5b052f8419500d94514c2f095aa13c