Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 05:22

General

  • Target

    5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    5a9fb4be76c44b0c6f143916a3e355e8

  • SHA1

    1f29aa71aed5ff0ee51c910446c5724ae81823c0

  • SHA256

    f1a6f2f365a75b95c030c89795a8880c7648516cbc75da625da8c108bba9f4fe

  • SHA512

    bb82e544b51224069d542c5f0aeae59137924bd26857e13ebe2d5df64cb1d1ed8041adf4038470dbe2d661d7edbd9606af812b14accfbdc53f98904940beb59f

  • SSDEEP

    1536:LUCeblW6SbZWpXleIQEoqk2MPg19g6chWj4FyMwNs15SxvWspORJbQ9:4CiSQpVeI0lPADu1sx+RJc9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    49f6183a18c7b0121d1180f2d72657f0

    SHA1

    f5772c534e64a7daa6de42b053735e83b2a269c0

    SHA256

    1c2ae05ebfa7c2a0994731a055e7c9b1d008cab8b24104390f799aad63f887e3

    SHA512

    520551adf28d11c6481f6dacb2b32ea3629ffe93cbb976b6948b4604f75c81507a560d243c4cb26351688cb920816e50a31907b928ff703709a4319fd3854c35