Analysis

  • max time kernel
    96s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 02:30

General

  • Target

    3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    3babcb4735f653ff82b1cc9696824179

  • SHA1

    859512b4f4322b18cced96c3a91db3d4f4602b51

  • SHA256

    96afe507bd911eb22f226d7378a600649fd3bb959f8bdae10c263144219f5ef8

  • SHA512

    618bf6a640ef0db12e481d8ba5ad7b5959fc7a87878e4bef9f9680654921d08edc4936c0cc0b200b3f5859338b960b240e2d7c2b0e859b97f4656ba42102ec48

  • SSDEEP

    1536:kVErzlpcPUrIJYF6RhhKeHld1zXDpu8Hw0WxRviaQswpwW8pO+VMNO:QiW8IJM6RSeFd1z1jwVgaPsb+j

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    160fa512b3e2bd04220c9f8de45bc80c

    SHA1

    45a7447bb20da2768caf26af980614340d80058a

    SHA256

    19d35fc0d121ae6b631262612ac005a0a2db3fa881a7284092f6b7fb1ab96823

    SHA512

    9481cb4576959dcba3686fc0c3e5751d81a56c49c28a358fbe41f4017ba0fff54eabbbc8c405c5dfa73e36c0b9818a5d7755b70308b5da19f64e2f0416cfe5ac