Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 09:33

General

  • Target

    5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    5b5fdb2fa66b30773c74fcf88da035cd

  • SHA1

    62dcce7aae66c2d670b0369cd04d902da095f360

  • SHA256

    bc51eac75a749039c2f726eceff7ccbbb7f8c97b7a982d2f8a4c3ac63e76d669

  • SHA512

    16728822bf212aedeabebc6be79981d9ce3659bf2cc31804d82b150fbf8c284df793c26c586b98adccde673988501a8df0cc00a6092bce3a6a09599c58d5724b

  • SSDEEP

    1536:VZJeEzYSk4xWVDkXg7IfA9Kx2QYCVdJvoyFUaQLFdfsjAuR0s1elW5D4QL32W:jzlP+fYAwx28VdyyFUamfPc1eo4mv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:348

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d21eee40f834842507e2fc0e91301747

          SHA1

          aad84c226bd258157be91b6652d2a3f25e203ad2

          SHA256

          57e89315e8931cbe725d8bcfbdd1d96ab3393a5eea26fe6e8fd18182c6700850

          SHA512

          b37752d51a885c9b145522489248d6b6684203b0e1ad68da02194cdaf72aa3742cc26ac3eb260603b55a16b2cfa38eedc9651b30a1cda513cdcd295738167659