Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21-07-2024 22:39

General

  • Target

    61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    61b1ac314bf23e8c8984213d7864d62c

  • SHA1

    ea304715de59e4cf8806c30eba52b14055f1780d

  • SHA256

    108b48646dfaaecc5a1cb5c785821b73feeaf00b5f858cea1c392a56042c64db

  • SHA512

    8d42b94bf5ff8817f4292b915029bc8922e06e2edee6ec3db42801a3fecdb2651adb1a4139d665923fafe3b953becc06ae0869b9dceada3d2c22049d8094dbe1

  • SSDEEP

    1536:e8rHZwToYm6hmJxiYMbmPdU3ckwdRlWApO6eWqUvtYMh9zWnE7q2VEXRxwcouS:NDgVmJ8YMaVUidR86kkteq/qR2coP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5cebe1a0b668f004dd7e167004e13ff7

    SHA1

    0bceaa1e40b0b04f41542eeab87e1acc34161953

    SHA256

    9e480eee2602fbec3981414acb2fb52514b5fe29071d8daff2bf803b5b385b50

    SHA512

    2da84418ec97fb5bc7dca3692fb1b93fc38379c896fe8c430f555a0a9028fccde89cc3e11eb094b4c4634f41a79af53018deabe9a67174fd6ce148222352559b