Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 20:49

General

  • Target

    36537c0efbb768a868d7f27e3f5f0cfd_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    36537c0efbb768a868d7f27e3f5f0cfd

  • SHA1

    01be45660beddfcf075513f587374b7db557ac00

  • SHA256

    e53c72ea26df8f90a79388b15829e6c2f4b374033b9e507f86d5193051d107a2

  • SHA512

    865e5a22b57ad695bbcd07a4067541cb869da139ef93d01c3643eeb84da009013495c2f61993d2f3b8fa15050ce671971fa888ef2d8ddb9f98e70b0f01e66f72

  • SSDEEP

    384:DLEMys5gr0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DgIIEYJ5

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36537c0efbb768a868d7f27e3f5f0cfd_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1952-0-0x0000000004190000-0x0000000004206000-memory.dmp

          Filesize

          472KB

        • memory/1952-3-0x0000000000CD0000-0x0000000000CD1000-memory.dmp

          Filesize

          4KB