Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 01:48

General

  • Target

    59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf

  • Size

    179KB

  • MD5

    59fbbfa67f4682282deb3f5e29734d5d

  • SHA1

    ed49948084a3bec38f53366b8c2a026844e602d9

  • SHA256

    0a47b6a3a0d74758ff74e42748b79b1c52619dfe0ceae6fa00b22be4109b5d95

  • SHA512

    6c203ec7f578c617b9764fde0cc9955ab368e767a252135034287325bf0ab3c9d855909290a7f4d242aece9a5d53c8ca6e924651cfc35ccc21191af209f33a21

  • SSDEEP

    3072:q8KZ8l1SHNiP4m8NFDHzwtYNEAs04A89cDdESI/ufH1vSa7JRwCfJ8:qbi1eiP4fFDEtJPGhICZr6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bab4ab9def7e936f6c5a47dc110e3d48

    SHA1

    3734a78c8dd41672699ccb99e5fcdd69280e08a6

    SHA256

    95a336efa68987fe62fdc6e35e073d0a799b557721cfe524e3404b693ed5da07

    SHA512

    3a8dac5e55def82783f8afed58cb10236abbbe3a02ebdc35a1544ceef69a56fe0df596b2e093921776fe67f160eede6a04a043166bbe073988f63b47c35cd9ad