Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 11:38

General

  • Target

    348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    348f1d5d069c0b56abf77d0ec65ad496

  • SHA1

    d24aa2d2a7f08d2c8c2e4753f2ea341d219fd367

  • SHA256

    4d0b2e61fe5923e9ed533b2a35988cfea5572649c4ee708c8e856cf546e4015e

  • SHA512

    c72417971c8bc6ee1dc16cb0155056860629f1c4b04199d3ad339f46d6ceb69b3ccae688cf3064150506b0fe5e98a2d3f021900b549870c6c4ae2867ee6c96c9

  • SSDEEP

    1536:RZvVJIucMGjHTvkrI6lvcuf5HtzOYtcCNxnWZ34N8fQsLROWspORgYd:nv3INPDWICvcuBnxx6Y8RLRhRl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d887ac1449dbcc21418eee11ed5fbf19

          SHA1

          7c8867a14a9c4c6be02de0e99ae4d6f7cc34820c

          SHA256

          d4b138f61072ac50a4804442bb793ce207511d848f574e83e457d5b803985b33

          SHA512

          efb6bb0a3622c2ee71d1a9df95686e7000caa19781335bf48ed764ffbe9d3519877e649f5d2baa592fe368419606768634c94ce7404ef0661d483c7115cf713b