Analysis

  • max time kernel
    91s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15-07-2024 20:24

General

  • Target

    4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    4b4240f1ee1019913050a995b577b39e

  • SHA1

    5e1d1573947604e732c8e92ff2893291f911eb11

  • SHA256

    e4284383a8a16071fc42004279ed6fbe902de5e97288f4a4bac6b99760b99608

  • SHA512

    0c4afd8e50ac0341fa71a922bcec4c802b402f64f557a62f88d8058b88de89adf8d85b0013ff97faf4bee66895188a2d06f0f254c6a7d569ab251f704bf328fd

  • SSDEEP

    384:DLEMMLEtysyUSR+UH3HYReR+UH3HYRLbcjrbWXuL98pRPFOF++:Dg/ghST3YReT3YRLbcjrbWXy3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a66447b55fb31c151cd428a06d661979

    SHA1

    f5b21d6d355da907dfca8e5408f3f2a559777f5d

    SHA256

    7354ae08583f234b583646c2f73f252605f0b902f461b6d6d49a3207e79c5687

    SHA512

    7393791ee8a86a69991f69ce52ee4ff1a1530aff1ffce6f30574a178d7d9cd0058a8ed7e47f946704782d19fe7434c3410fcc21e59cf8ba7f01eddaacc0a4ab8

  • memory/3044-0-0x00000000031C0000-0x0000000003236000-memory.dmp

    Filesize

    472KB