Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 13:56

General

  • Target

    3969562cc3c615faa576e95c80cfd758_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    3969562cc3c615faa576e95c80cfd758

  • SHA1

    46d5775cc16208c664b11f0018f02b5b8db95f16

  • SHA256

    b4560bc24a9eb239eeff912a1dd8239e524e9b5b79c0bbc8a4057819ce1b257c

  • SHA512

    a909e50766d8049aa1603ed8ee1b1c54dd10c5cffb0c13f5b6bd6367c6d17c28495508e9648fae7986cefe1a8e59223d5076cf840b2ad335817c983377c4aecb

  • SSDEEP

    1536:mlvetp9v4CzhWad1/7InEem/513Rh+uo8Y98rNhVMGvbGL2bkorWazt9eYKnrF:pP9AXad1DIEZDh+8Y98rxzvbGvopzt9G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3969562cc3c615faa576e95c80cfd758_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    01a0eda6dac1be1af12fe639556257ab

    SHA1

    c9632aeb4771a7b21438d4fec74933ccbfd2a1ca

    SHA256

    3c6d171189de1b998f42366094780700ba86c22bf7472519c9f013efc9bedfe1

    SHA512

    69b159307d5cf483571da7837d7796d56cee52a4d0af1c14d19b4f08e8897f1db33c819266fb6ab1725bcbf5032390fbbfad28344ab5e30dd3afd32a2a0e1446