Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 04:07

General

  • Target

    333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf

  • Size

    95KB

  • MD5

    333dee0a87b7c419374c20362e654d19

  • SHA1

    b44f532483b88e998a9b575d592b2200a0465466

  • SHA256

    668ebebd816f84165aeead3138ab50e093495fcb3a3bcbdd93f2725ffbc139fa

  • SHA512

    7d648555652147cd693619cf55dac443a20e97706eeb777d5bed48c4b8a9a4f83d411b0d6fc0c339294ca98e0d0c2d20548c6c47f16ec79b5a33fc43ecb2b7f4

  • SSDEEP

    1536:hnULWbwAYOjfxMFkKM6tsUuiHfR4hCxZS6qc0rBWO0t2OUL+R22eKrWcbRbLmyW0:IW7hjZMFkB6+U1i4xrqBrBYEOx8KrWQl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:280

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2781f792c731ae7b5a1677d9d31e5dca

          SHA1

          7e0e408ab3be7aab747bb9201147e7e3947a718f

          SHA256

          45902dcc8dae565aa1255e39728f9f1f91dfe378fd3ec9a6a93f3a1dd40cdc34

          SHA512

          586e5e0c44e888344aba6ff06d8fcbce4ec82e5476677abbe349009e042cf8e8daccbbec0b403950fd4aaad5a1dea3c634c9a2cad941aa7213ed18c5708e4bd4