Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 08:16

General

  • Target

    33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf

  • Size

    90KB

  • MD5

    33f053a5a693f2a835a22a17b3c79438

  • SHA1

    e58ac9d108cfde5afb8b0136790e00eb122a3d93

  • SHA256

    47702a2f91bed62e4474bb69f553efa92b5f382eaa7624d39bf2f8d501744bd0

  • SHA512

    3b5bcf621ef21d7af78ae35f20ecdaa81db361e0a1c55933e8b12722afabf8c6ec9b3571b29e4b0e6a58cbcc1aa6ebccaecd46021999a511b67b90a832f873bb

  • SSDEEP

    1536:WlX+aMeliahvIXLGt1LWdR2PMa2P2SaCgt6xmWmJ9Pzll6mWypOlLFMtWHwZ:rMlvI7Gnq/2PL9CgtzaHlLSWm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8b633aecb68ddc47accc5dd0faba8976

    SHA1

    54b80d24589f736f5edb7f340e927d9cc0f6a961

    SHA256

    9dc3ed9c83530275bfde7e5c57538fab506f96bc9d39b320ef194fd751b8d891

    SHA512

    5875827c424652e715b946b6222a6d6e1ef7497b9e869ef5e7273b9eb7b8adda87680d856a4bab9f4bb09b5485bee2feec8e24d24387579fd9e0813ce1168e9a