Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 09:42

General

  • Target

    4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    4547c0df834d15b6a1902d4d7fa65e65

  • SHA1

    e74b626d2fa87d71002c510d43f528ba1824f39a

  • SHA256

    1e39c555881084d79dbcea5311307c6f19ee980f90464b9649ee2c0bd9cf9f53

  • SHA512

    2c23955cdd19a22494d1ce1996ed1360c34fe86d3c879ea5e78eb7b6a234c074916bfe405d6451d23cca12ca8838d93f7fc77d3e77abe78257e8023c03c04f44

  • SSDEEP

    1536:oOobTIw9JBmfGtDOsbVVdFTMrR9LldUHbxKGWW7LpTr2WGpOmSfbHc7do:sbkwNcG0sb9FTMd9LldU7xKGN3msbca

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eb36e12261ea5abf3d8b5978fe331d9d

          SHA1

          68229fe1befe08463737393b4f87004bfa26a638

          SHA256

          a3371e9f5e188f84c9105243d75a05d5adab0897af5ffbecbc3b9fc8915c592d

          SHA512

          c6b329553892add7050226fe1d158f3e3bd20dec261aba016faba4c17512d79727bca27eb11221d24dcf4e85c8b7a7596acfd92bdcd0215594d8ea963c06fa17