Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 19:40

General

  • Target

    3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    3ea0d72e2d29847e115b93bc1cad5a65

  • SHA1

    f89d98a743c7f047500e6c55caa67886b0c30207

  • SHA256

    d4b7e5fdbab1d4034bf06ddd3b509adbcf8540707cb59c21bebbfa0c8379261f

  • SHA512

    c0abdba59e6969a234db5ad36cc9198e2b90d25a6a7e783c76d283d4ce2d9271b51129315f56d80d67e3641c52d2ae568ba0a6d4cfd81dc55082dd86baf4bfc4

  • SSDEEP

    1536:zEGnj/d/tPDjh7/Gfpkscj4hsYxRPq5pAW2/7yum7ScNoWspO2gis:QGnjd/9Djh7+fpksw4hs2pwpUeuuND2M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          731bce03c9b65f782c94428c4612adf3

          SHA1

          957a464b8a1dbd768623391b1b59b6b182855d77

          SHA256

          b893e98b7cc3e10da4773336d550dd5335c80fc907909abb0a5799c28926236a

          SHA512

          27fffcd76627ce4efdac26c6f47fc4168fa7dce49cf513258e386dca3145f5d78289cfb7f8ec7d5144c88988035751dcb203854903ae1e892ec5808279d8d822