Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2024 07:43

General

  • Target

    33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    33d6101d7d4110211c485198a2a68480

  • SHA1

    0700ba126ec20a96989d712ad8e7683edff4b2ac

  • SHA256

    370c8da741a7d8665647e219e277a44f66d4685d598c248d4f83fb3681fe4106

  • SHA512

    b942af9034f1a006b924a131cac8b7cc187018144415b515af7ac8e1dfa820ec1c768a95b685e322811b2d826933f5d70c26b1994a729026bf0262530eba4d70

  • SSDEEP

    192:QP5ufkuU/wsZOAZBREHa26BwbMVAVb5uSqyhtW+olqYS:QP5ufkuU/wmNZHEHa26BeMiVb5uSRhtZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33d6101d7d4110211c485198a2a68480_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e40028a63d468314995b17ee6a94545

    SHA1

    8314bf9c6d59bafde7222031cee1d46ee1e515d5

    SHA256

    31605a1426f9f99d3f6fcc67ca565fc091498d127819b8c124ffe82eaf4c8e87

    SHA512

    9797b03180272f58ae36053ffa6a977973d7bc7e25f4957b1c436346bea58a7387f8739ffaab17e3d4fa6da837f6bc7a13f39cac8ce1cfd169aee96dad16317e

  • memory/2548-0-0x0000000002B30000-0x0000000002BA6000-memory.dmp

    Filesize

    472KB