Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 14:25

General

  • Target

    5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    5c51b3fa934096a5f45fd402fd8044ed

  • SHA1

    3f35ce4c2b2f9d8e0f761cfd705e0bdcfac10313

  • SHA256

    f6c56722e1450f5d340c70574e26fd708e14037dc0b5128029ac33ea9ea70e8a

  • SHA512

    696da8fdaa6579d98a3cadcd9d199862fbec71ec5a57ddd0a53d5ecd6a369e13de4287798678692d0f0aa2c1c531afd72cfdfe25bdbcc099400c99f64f6680e2

  • SSDEEP

    1536:UBvMTj4yHNaxX9XzU9nDSWuD6iIJPys0Sh3P+2+WOpOwrCkUDLYXuW0nD+gC4LOh:qMjHMrzo2FmrKgh3JwrCkMLw6nymLOh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    814faa8c8a9c870eb64a065d5634acb1

    SHA1

    14bf4ee61e58b76ef335a21377818df8319f1787

    SHA256

    d23a30949177bcf04c6deb318bc322cede603663c536e008157075cb36cf1af8

    SHA512

    35a86a74407e70c1efeeb9b169ee1ad1598981cf20380300e1850deaa8a56d9dfe342862ed47b2972d9a567ab0755faab80be8ce56dc02ff9e9254f28dc151da