Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 04:57

General

  • Target

    37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    37c8686b15e602b7d5a3d417cd3b345a

  • SHA1

    d8c0da32a8d51d11b9abf569cdbe34e36ad3e2d4

  • SHA256

    cc6666fa479c0acf7e6ac4c4e7615e09e548ffb5880a5cede2bb7bfd2ea1a347

  • SHA512

    61c1c9574c2577b692fdfb6ea62aa6fd5972533d8d57ae2e76962fdb7939c155f99d9443ca4d2996917acb3c0e841805d98f9e57a07c265fc9fa1b7ecaf2fc03

  • SSDEEP

    384:1PV1Ctn4pDr1oh5kA5OSt7L6fGAB1w3y97pZcZ7NvQb/2GGYR:Hr1oFgfGAX4g7cZ1u/V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          036fab4341613921865e864704f13ca1

          SHA1

          4da7d9cdc9d49c0d27483d9b265a2cdd67a89571

          SHA256

          5d1b2ab14008a7031f6b6bcd7e3975eea5d219dd080c580715a8b93a8a69c6a0

          SHA512

          d109242e7cea21b7969812f90a3004575c846f38a15a21d74b6b767bd4cbd93d914fd693876c357417ae6bd2df0d7708065e7078778b949a18eb5871f9139deb