Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2024 01:27

General

  • Target

    32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    32c7669c7d6ee95c43a98f30604ce2ba

  • SHA1

    f9abe461b9793ce3cf3dfc24c4a714cd913f96af

  • SHA256

    2ee65a16207ad223c018017bdc0c4f958b713d4077331aa90e8fd968b07a662b

  • SHA512

    bab3b80d7b29942fc878fc8344f54e5f466c84bbb1557f787bcfc338c287b32f138aace8765c1382d293c0dfc21dfbf46a8a75949b07cacf56563b01045c8c15

  • SSDEEP

    1536:14qXvripihV+cX0kv92hXljA7qei4jdQ+nRWapOn6WUmkv1VIRsoMk:GwrichVv0U0ljA4od5SnOssk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ec4ec08ac883e15e3039e7e4ebdbbf39

    SHA1

    11845a5cdeb201bd49ddc089cb1f2c15742710af

    SHA256

    b0885926612be544cdb8341c10cd7d3863a44d9ad506ce8c9d6d31a172b7e2df

    SHA512

    0c65a73d653bc2d329014c3797ddf42bb0c49a64eb72a4028dcaccd9d7d9cf8bc84857c2390a8f4e28d31ec351f87598658fd15a755fad1ad1ad84700a441ff9