Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 00:14

General

  • Target

    3b47a14c9c156742e3fbe3a986d7580e_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    3b47a14c9c156742e3fbe3a986d7580e

  • SHA1

    99a744d959272ec865db0060a86a789aa2b87369

  • SHA256

    23939427371b22587522d87abf513738b68722712a9a17d7eae92938e3541487

  • SHA512

    e3eeebffa1496fa32e8bf3343ef1a4bb35377502d8b5e5f65eef31b17c1b875ec5550fe79ef0225c8a9b3e750b57088eb45ff89d42a0fc23eec72ac8a16b3126

  • SSDEEP

    1536:/4Os0t9IYwoUOcE7wYla+hr1xfC2btcTDNTWmYsxWxApOGB/hUFIuOxoaZU+oaKI:wOZEYbUUgix62bunN3pW3GB/pP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b47a14c9c156742e3fbe3a986d7580e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b494b313cd4af08c064eee3c877b4123

          SHA1

          80a89d2e14082caf6e6c7823ba23b1122039a803

          SHA256

          e96d0e1678a37405d867a1633c3da687dade0497a47e8da7f57eeeb4cdf22c30

          SHA512

          2a7fd0b434b9edb97a57cfbf8ed606e75b729687e1197e466f16be1bdcfe8f46d9b84d5bf6f0641325e0b20d95851003c7c9afff88ed8172baf41d6a6816d5ab