Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 16:41

General

  • Target

    4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    4a85df47f83ffd572593457f2f5b56d1

  • SHA1

    bee242dc9eccaa3b934e14df33b96dfabae4cd6f

  • SHA256

    986efa226c8b8434df5ed2004e0a775d4e01d98e51e5e3abc129fab3e2164be4

  • SHA512

    69dab1b240616e6c6cc115b0e07473b806e06553ed8a948988cb5511536917798a94792e0192892221952637629f1aa7849f50fcb9bbfcafa806d621404919f9

  • SSDEEP

    768:Ljf9+UA5HQoMlpU6udyj1ba4PF07RTxIlgTmyslw/FkIhLK7:LjfHAVQpUjO1b190RqiCl+CQK7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6ea8ca8db365e70bffe749d9a8d0c3c9

          SHA1

          99dfd2d9506572de4e2a381a1d8d5789e61015d3

          SHA256

          5f1079090283edeb6580e55518b1049b4cf678d15e4536d1125f96945ecfc87e

          SHA512

          b6ea28714b187833c157ae20244234e803f15f7737b5326efb297f511f88c4f3c277d6a49f22acc92c905279e98e0073b12bda8b670896742a67393c18e12fd6