Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 10:10

General

  • Target

    3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    3cf2fd4c985b23c7e9a0c7492424f426

  • SHA1

    520f170db68b48de197d8001a69fef3ad012d89b

  • SHA256

    bf0622564a2eff14d29b0907bb571dc63d68fa109109a78006bb88456a04c872

  • SHA512

    6a3387df6bb1995de39ab12f8c2721ba81074987b4fd6efb87b132d50c8522f15f0bd3af701011c81b4b4300947236df8e0faa261fda8fff2719bbaeeb998132

  • SSDEEP

    1536:DAOiIJKEHHdDxEtAtUHSlPd+8DiW4kMEUIpkYWGpOKCWyvN4W1RFAm3:Jiyz/ISlPduW4kMElpktKaN4yRFA6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          607f5df95b8236cc6bd68a0c818b3600

          SHA1

          a2c9b97b816c6129ac54d486070e85287740b0cc

          SHA256

          971373b6c316ec6d7ad5444987a3b9702ad93b411e7af83f7074bd9784da1cde

          SHA512

          a1c19f681b610ae1619af8b47b19847c8e26f65d754c6ae41996540ea5a31652381c5635a3ce113521c6d10eb12864407e2d1640452debffba5b2e71880ae8fc