Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 00:47

General

  • Target

    32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    32a93c51a160f3098aea688d655ba9bb

  • SHA1

    6489704ea50e0d45d4a962ba2dae2e00c4335091

  • SHA256

    e00c5f83a4bdc8df2c8cdd6daf524af32074edd4ebde995f52b55a5d02d66c54

  • SHA512

    8c8543a952f5b214f428d30935dad154b840e99f370af4d44e43fefc1d285de5938f5ca15120daee1fb7d35ec6e4c51d1167f170d7f8659934950e20cf0ef494

  • SSDEEP

    1536:HIK+QM/CJAT2Rm5b+IYJtIibU/1cSOcxB/m1bfFvulA1OuGJs69q04cj0:TU/CJA/x+1tn4J1zWbFvulA3GPP4x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bf1278da574c89d5daa4f521789bea9a

          SHA1

          118b7bd58215566173db8bb20de0393d16915762

          SHA256

          e0938e66369e25e0cffdc24897a62c016254467c44a6a1e824d9a14603aa2745

          SHA512

          016cb92a382ac2b1d91576e2e6fd31d11728762f46c4b2c5a7baeacdcfe5c618c07e8880211048deb503d33cd3a0ab25847ebae9bb2b8556671268a6a5e56f55