Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 17:22

General

  • Target

    3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    3148e67432fe4956815885dc479bf2f7

  • SHA1

    2a1797b5a47f5785565fd9f1468a575dd0b88b4d

  • SHA256

    a93922e88c859c0f4212593f9b0d53a641b0840d524d36df1039ea4c028e8afa

  • SHA512

    7d4e45091083ee3e793ea7a3f92be2bbf60eb5a8f9da5ea50c6941c3153564edb7a279e5a51fbbcce1ace30850d45fc152610f32041e6b732841c802985a5eb7

  • SSDEEP

    1536:yooevFXReZ14tVNLkH2xFdHEVjmuRekLr6/SeWGpOKCWjczTnRKR2s:FXG4dFUjmuR7rJKZczTnRKz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c4df63b502aa5a8dd4177aa864922f71

          SHA1

          6fd76cdefdd58b83d816728f438ff72b84031b68

          SHA256

          0f21901783325dd1e2403348d1ac8089398e64bd8c95cacbb555d310e4a7c99f

          SHA512

          e220c688433ab42e0a3cf18a27dce8229ced0720f9dcc392d1285fd02add6f5af36b9ad623a0f0e97a840858201b49e7fe0fb103d1bb20ebf57596111cce9b98