Analysis

  • max time kernel
    95s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 13:47

General

  • Target

    5c3346bb60cafc4daa599118bf245cc1_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    5c3346bb60cafc4daa599118bf245cc1

  • SHA1

    f15f86fed387a49a846ced02db19c6e9b3c83523

  • SHA256

    4b753e2a2feb1846c462d95cb66e55ebf5b85e28a26c7bc1032df3f0d8c0ae4f

  • SHA512

    bf09f6302fd82aec44194daa165b0e8cb906ce7b6fceea7b146ed37c4de827e9b5b018b03d0d5be24412078b08b2e945823f5dfc05b714afabcd146ace3143bf

  • SSDEEP

    1536:MA6TpZg2hVYRpa1RhAbqQQ6+ktWhv90fzGu2T5Wh7HhyBGAXWOpOaZftaOofkiZX:o1Zg2LYORhAbqlb1kzzmDoaZfFofkiN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c3346bb60cafc4daa599118bf245cc1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          afebdcb32fd5243aae9e57e038264831

          SHA1

          431ab7ab7553e82b7322c696c7885cef8cd7447b

          SHA256

          48edad886aa917806e710fe98fca03b164eee09b094e0719d0c07cb52b225974

          SHA512

          0ca9f1911037b66acd221fbfaacd42b0dbed019b72d18570ed811d4307fba6379f5cfa81d4ae0c66663c0f572a533188f3c554ce78644a2781f18c78a2cb5c4e