Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 13:45

General

  • Target

    3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    3d9e43b161bb1dd1de8b3042c5503b4c

  • SHA1

    d80a2a273cdd48e8f76f0a31532320c0fdf959e0

  • SHA256

    90e98c506982fa368b123b04c23499e8e826ac84096553a7ae4246e7668b4813

  • SHA512

    791ea3df55d3093872e0fb907b3252d5ddfbd1e6cd2b83cea61846e8a1796d24cff5eac922ebd571ae10980949b8c9e9061b6e201c793ae7dc8c6c55aebfae48

  • SSDEEP

    1536:vAzGTPAb9Y5P4zGoOdjjkSvwcG7I8mm4MNdQ5zumlQvWVjH1WF3UXkog7DWwpOSF:OkAb9YuzrOqSHNWq8vvWVjHY3UXkR7Gy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          68a2f4ea86d77ef6f28170e2e745451b

          SHA1

          2dfdcfab619f0b6fd76471a7b6d67d65235243c0

          SHA256

          e7430ec5d3101a355362d8342140c3ecb2c6d1614f39c1715d2dc18d21dee91c

          SHA512

          53bb61ae290f9247690d6caf7bf582c8156fa3a111e6fe27762774281ee7bd58185f9039da49ceaae0d583e04a9e5ce0eb53b5b5f154d4879005c65888077876