Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 22:32

General

  • Target

    3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    3af9aec5153cd84f537edc32a2560f10

  • SHA1

    d0361cc542da8db8701a0db9dfc5ea9abd036b0d

  • SHA256

    febb17d645b04c58ddb7c62d817a44cdfa508c537932a371c97ac71206e91d98

  • SHA512

    8afa1922a47b7e65d6b97a041c3fd1e9b7b8f36398649f8c9b7c7fe93f7e2a2c316e5ab6b0a8ace539fb1fbcabed8abc097d53c771912dbc83ed691f5ebcacb5

  • SSDEEP

    1536:yFg4Y/NBq5Wn0xa+VV4d1JaJ9TKt1e1dhhuI2nLbHtthgix5EqAPUGIWisek9Ww3:p4Y/90hm4Jae1dPqXHnr5pA8GStkkSN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9fca5587a642dfaf8aea2701b4e212aa

    SHA1

    36fd1991a69386890ec021522b4f94079721ea3d

    SHA256

    dc346348449c6d8a6ceba5ff4ac75b643d469609985c320026176e070c0f0047

    SHA512

    7e3d32d472720655e0ff4393b4472842e7e1916c4d9a16efa1bd35c515962d06058d5f949fb0eeee2b81f0e4f085072af10f6e676c33f3ac00c63a43649e6a0c