Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15-07-2024 10:57

General

  • Target

    497b7a4fe6c9f49416766a643b3797e1_JaffaCakes118.pdf

  • Size

    97KB

  • MD5

    497b7a4fe6c9f49416766a643b3797e1

  • SHA1

    51d7b8dfaa423371dc6a50752e53c99392ac898e

  • SHA256

    1747a4c45eabb2c69f7c015022585d7103f3e00dae06f59efd0aefd2b7286cc3

  • SHA512

    0814e8041567676196c4029f74949552bcb861b139e7f1c9d1ff6a2cee5ebc1990f5bcbb75fb25f6717f024a45c136b4924e221e4b8040d50cb25c5a4e71ec43

  • SSDEEP

    3072:vv2yOFqeq/9FzhYNT5TKEfW3IXCbE8pAQ6hXm5:eqB/9FzhYrTNO3ISVv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\497b7a4fe6c9f49416766a643b3797e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c7f9e5e166247c1afd8bd0b9e970b54d

    SHA1

    d9ed790a7fb1465659a9f75fea05afe982b26e2e

    SHA256

    2eaa54ddcd789fdcdae08bff580889aaf057e7b898e85258f0266fbb0ea61b44

    SHA512

    d22bc0ad2e28c75ff69d9eec760cfa6caeecadabfed5a9c7f85782befad3f091949c85c70cd21d382403a90b8cc48376fb2a5faa3e51fd912f53521682808094