Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 11:16

General

  • Target

    4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    4e11e331f14fd33232dc53a55d582091

  • SHA1

    2ff5ce1b5d6bcbf17ad59efccf084031af06c06c

  • SHA256

    ee4419fde1d434e39f1eeb0e4dc44478ba14461dea513b510f2be4f443368104

  • SHA512

    9d021060b5e40a7fd44e2890b75d1032c3da0ed498cbb2683829643dcbd5ef16bb544e037ebaae9f5f6b49661ec0ee7671399c61b3dc8fdc1a92ea78564a10e1

  • SSDEEP

    768:XLBgEpRsKONsNjRyhg5I5LOTfB7t7KC2NkTo0:7BzFONi0hgW5LOVgCkqo0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    511ee9dab9b2adb374c8ecbc0c996ff4

    SHA1

    23b1c51aa3b6a82da892c841c1f3ea9abea9317a

    SHA256

    52bd69c6b5eff6991402252cab8848d95bf425eb03d1d71adb191879360c287f

    SHA512

    cd1eaf3e03889e3429c373b0f3d0fb68eec57ed9e3d546ed60adfcd35205bce1618bc27a76b9809da08d2b0c7e242bcee81f3a635937bfd2034e2f6e7d2c867e