Analysis

  • max time kernel
    93s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 08:28

General

  • Target

    5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    5b2ae374477ab3378180df87124a405f

  • SHA1

    d4c7a8021379a0631e91e25b2471573afd6315c0

  • SHA256

    bcee361181ecdaae50ec5871fc64c2b9c69c47aaca22babdaf2f040a6838bb54

  • SHA512

    2a0d8e9588adede12536e74b4e9ea75b0135c49b80919557300bda3a48465fe51b85813b5e361a9e3eaef6122d7c6c9e97703fc12d5fb644c6e8ad891ed860ca

  • SSDEEP

    192:QP5uFm4kUge4e+g7s6y8jujpB2C5zuxiH5zLN/D3Gt61STYA:QP5uFm4k9k9y8GX5zVL3Gt8STYA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b2ae374477ab3378180df87124a405f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    17f14f9b076a844a17c66f2389a3819f

    SHA1

    85a6b20d3d1dc249ed5056cbf22b4f6ed5323414

    SHA256

    2efbfa5607cecc83ec8f60b18388edacba7fd8247793ab525ae26850328990e1

    SHA512

    aabd6b149b8dfa58411cd5928339e39037b5cdd3e0b67a06b77287802fa6549d1fc38f0e9f5ea56e4424758e076379f166c55b9b42a0c6565c2ff30bc6d565f7

  • memory/1932-1-0x0000000002EA0000-0x0000000002F16000-memory.dmp

    Filesize

    472KB