Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 03:46

General

  • Target

    4caef29da923fc80235c32c1909c7868_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    4caef29da923fc80235c32c1909c7868

  • SHA1

    a6e1dff255dfc789a663edbb367011c9c22bb26d

  • SHA256

    6bda6d4993b0751429322ad876081ce7d42802309d67a792099a5fbb6aad3705

  • SHA512

    13ced6d6275c74ce16154673b1ed31f96c53fb70abb87e57b851949d8fab2208645576cb9572dd53872bcddf1d0ed6997b75383a2e0609af403515d8630d37a2

  • SSDEEP

    768:xgGzpDMfBV394G4913PCFwGgWGaiJKCjxXGphyF5BMmDQloKqeQ7tX7XT5ubQhAq:CGFID94hKF+ZtDNUQxEcifT5nT4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4caef29da923fc80235c32c1909c7868_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          71614e332e831fa7e5577e292e24868f

          SHA1

          c39b17a87385376785b6cd97466f62439623ae64

          SHA256

          0b1f72cd2937cc41a449317232d578295e608eca5cc5400c0a3aebb84ecb6888

          SHA512

          d2592c14fd2aa127612da24cea11f4a0d2a8d8ccf78c332cfe283bd2c846eabce5e3894ac294a137988dd099c11df4586c96ec1f4867b6d2e8ad6bf8d0ce2923