Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 20:18

General

  • Target

    614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    614039dfe41303eb415c18dee07739ad

  • SHA1

    0ef9a064e7ff048dfdf6386ebd9596b3403b5333

  • SHA256

    d06da624193fe8749aba4ac652670310c911522427f1114f8d7251eb41f4e9f4

  • SHA512

    0ac4cf737634c3055ad019de2d6eda06e76294b2044fd224e6860d4604ce63b917dd52dd95ca113497435e88d60d2622ab453c8d7a2796732ce9364f457ea66b

  • SSDEEP

    1536:woMET/SFaZUZkJuV9mndZehBW9NYSZLfH29xKDvUx2U0JrHpfSVr/agWb2:83iuQd4BWXdlmGvUxnOL1SN/7T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ee2f81bbac28944a60a03c56d265a7cb

          SHA1

          f07ebeece58a1bdd2e01cc0493e8ab434a2cd18a

          SHA256

          e79f47147d48f41c3861556a72baa8f296bcc536b496d5f9d0fc45599ca1b1f2

          SHA512

          82b659a017314331ee15ca006889a56b50b9fdc379f29798f9faf797efcc6a514c1fb51bcf19b4db6d738139b884eaa3b7418038469e60608f70ebe2e04f45a2