Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 02:49

General

  • Target

    376be90800b8334884013fcd8cae380f_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    376be90800b8334884013fcd8cae380f

  • SHA1

    c12312b761cb5f959ecf7cdcca674000d06d7ae6

  • SHA256

    628a05a1b15020fbba62587da72c50d4e78512ba44c9b9564ff17ee051604e4c

  • SHA512

    4f9aa1f95d3c3d1f9901a8f08367c1ef34fddc14b35f41edb9df873a3dbd7c68e92c7b590a9b21a4a04e30a9a0ad8a77b44b019f42abdae639d79bc6b1cbfd37

  • SSDEEP

    1536:G2SmeZd0hWdie5eZgl00GVjttyehbiiXWDYJ7HtBTKaW8pO7LWG:qmeZd0hWdpw9zVj/yOJUSBTKh7T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\376be90800b8334884013fcd8cae380f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dc9365c9b6282b48ea40d9762446e0ef

    SHA1

    9171871cd61613b97c3ee0b26ad2d8a9d00dfb16

    SHA256

    7c07c341ebbb16acda42770169ac743bfd8f8b25430ec2bb790433ece6d602c9

    SHA512

    70e542b25da453a2e6683ae011d77dd38a0a10a4051bda480b748e1d5b7e823561baad6185b9011fd792cfdea3e205441169d1c994bec43ce87a1219af3bba53