Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 23:42

General

  • Target

    61e783baf4ae0d015448c7f8ade196d4_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    61e783baf4ae0d015448c7f8ade196d4

  • SHA1

    c4e56b0c4dc649b190c12dbb99e4048093786ca5

  • SHA256

    e4689f86eaaca75b3432b904017c858bc86d734ec1deeb99ca077d98fd4ab855

  • SHA512

    6936b20ef83541441f328742f79618e47bf45a7325f837602ea8cdab72bc25170e9b812a97b602b31d08cae05d929d8335cc855cae424e819ea58329b3870173

  • SSDEEP

    384:DLEMys5d40O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DgKIEYJ5

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61e783baf4ae0d015448c7f8ade196d4_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2440-0-0x0000000004080000-0x00000000040F6000-memory.dmp

          Filesize

          472KB

        • memory/2440-3-0x0000000000C80000-0x0000000000C81000-memory.dmp

          Filesize

          4KB