Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 06:20

General

  • Target

    667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    667477cf209fba58f05d86b06331b4ec

  • SHA1

    2c4ac9ea11e6c69775599944e909e68bbc4794de

  • SHA256

    6d2b857e47669692873868260fa16fb5e047b610e40742bffeb964fa9b929921

  • SHA512

    42fd3f2e2d50c09bd2b4fcbc39025f1808b5108ccac85af12fa4464a85d956c0f53cef2c4c6ac8fed2ba6675301a0ced9b32f37b7b08e5c10bfeabd992474571

  • SSDEEP

    192:fE30wmJoCQziKgHvhUenbvXjxnx3kMRhU+yCVx+knFYJayC6hS2jw:y4vQzghUebf52iDn6gaayCUS5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4686c9aff2ad905cca4f723d49d5ea32

          SHA1

          70ed9fac04ab50b582bf87ce8cc7b69090192575

          SHA256

          3c5fa5019192e7f834d5e5bbe772d3890e9355c571c9390316c5550a9e5de6ff

          SHA512

          674cfdc13d6423b25f43ff30d41b78040adfd1e24b7a2fb8ae775c8abfa84d58a86a325656e66995d4b03cea8a941e633724dce8e05763412390bbe40689ae96