Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 04:48

General

  • Target

    3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    3c07a7f38323dc93acbadad63321db3c

  • SHA1

    8c01f7fcde05f523c8ea2a28660f37bf41243597

  • SHA256

    87a85af88252761fc9fefe8320771a9fa702015d486e0d576cd1a6e81ee948ac

  • SHA512

    1e20a852f6095eaa0170473eb1f0b4944e9909e3ae51f2b17a1f02de99127b54d561d79fc6c9c677f13549d8251070cbcc262dfe6e7b5c35172edb5b61710b90

  • SSDEEP

    1536:k9NWe077PYX87r0+h0ZDroaVZwIv+0POOfWpiaoWGpOGKnbD+T:LeSBUmWDroaDwE+0POOiia9GKnby

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e95f1af5a1f3134bbbe5b208c9e9f785

    SHA1

    001083372ab661ff8fd2559f77d2800cc59c48dd

    SHA256

    f8c2b1f3d987d00c8d28033dc14f1da26c6bd15a1d1858522548283184e6684a

    SHA512

    e9f98053aadc944987c93a1721575858ea6da21b4f21ce7146b6da45b248cda74616b9f63d4f1b5f2af140252acab35998974a895c958301ce1e27fb52b4827d