Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 04:31

General

  • Target

    5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf

  • Size

    55KB

  • MD5

    5a78f2d698afe7c09f5638c6cbbf4040

  • SHA1

    062a4a57da6e7919f18f6a83a4e9fd7e2ecd1d05

  • SHA256

    2d1b3147cb6c20777d7558589f8d8b45953defd48d3a2249223a292da9d83750

  • SHA512

    e25bddcd6eb9286fce38df26b555b9370e41cf79f6e71f179b2da6aabfd8f23f98ed9a405b160d78857737d99bf28d8b0ec38ca1eb3afce373dac19b54ffc5c7

  • SSDEEP

    1536:hnVmd+KFr2McHZ6v5Ppz94vZDJh0p4TLqSGLAd:fMFqv5gtp54xNh0ST9G2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4257217dfcd8618d5e165b34c08b4fc5

          SHA1

          dfe19abf960d9ccbfb96e1fc5ebcc95d6b76b4cd

          SHA256

          b59cca9e7fedb7daa3fd14ed2db7c1022ca2f68ac5deaf163cce8364e2abc7c0

          SHA512

          d5749327a046849f5bc6e6c7bed35c084cd427c4071f95f7254ad2bbea77e80181406de964a6fe23eddb2735affb3185880f5a4532f2c1fd3b488061bf5154e6