Analysis

  • max time kernel
    96s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 10:35

General

  • Target

    4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    4df028eba454fdbe29a5312f2693c3d7

  • SHA1

    124c710f0eaaa7b0623505257c079b793bef5a79

  • SHA256

    99cc06ab6ce7cbc64eb968beb142395d27a0f95a2debfe1657bab1ba2aaebf8a

  • SHA512

    6f9da7dc7d729243e1f46670eb43b6273261c7a36ffb49a27ae91d4cc4ced85dc23c1a499f19b20b8afd006869eae0f0c1b9f1511b51b436711e7301b07a1aeb

  • SSDEEP

    1536:SxiL4S6qnjqykJZocNVEbDqjHx5qBd5IFkJLrZRsP5WUrnEcJwlR5:cu4S6qnGjNVEbGS33ZaPoc6lf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a3c0563e2d8e5c43eb137a715faedcad

    SHA1

    442cbfc3359e781db3e6368db7b6c85ad2fc2d24

    SHA256

    ac8d04d3055728ea172def1bbf64835a6f11c910f43ddc3213995e4e0458e1cd

    SHA512

    677801b84d86d79b5712f494c936588453b4d112dcf710a31aacdefa2465ffd051acec25686984a41e611013496ef192aa03c1c841da4dace3d7f83c1caaa39c