Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 03:19

General

  • Target

    378365465876469235f8de02dee8028a_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    378365465876469235f8de02dee8028a

  • SHA1

    a22891116291d7bffbfa78e1a1cee8bf071696ac

  • SHA256

    4eb2c7d3970dd36f358d8aaeb6c28c24b98f4649cd33be3100d8b96f72f5075a

  • SHA512

    af3fe65a0f9e5bf2fab2b38caf23d1442b892736992e0092f349c4285686237f6d4a1c8a910f8cf2d8dff9aeeb76f5c1e3613d8477b6c5dbcd698e2391ae9b60

  • SSDEEP

    1536:InX/FfjPRoSwjNnwqm30mhUQMUIWZX5duid5hNz8OWOpOwrowbUlxr98nT:ktotwl0oUQMXin8jwroQUfr94

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\378365465876469235f8de02dee8028a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a09d076b908d0babddd47af1b85f7664

    SHA1

    de71d91362596e3ffad403319b525aef7ed569ac

    SHA256

    aea11faa8e8937f701f5142d2f40648349801e729bcd6a5f4a57224e0bfa5f14

    SHA512

    eb5748cb5592cba5819f98dec5d6e64e86796cecfc85217ba761f586726aaa7186affe3aac5bcff9233561f8fabdfe790c5bd975fbe8fda43ea5255b5879790d