Analysis

  • max time kernel
    96s
  • max time network
    21s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 09:31

General

  • Target

    67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    67069c7a2db2eb2d0ca7330e6d46fb95

  • SHA1

    fb1da1989690e2b3ab0d365ef04b3df6038bb229

  • SHA256

    007e75fd716f89a63b4121565a68f85446dab12b0dfac2c1e563c3cba073137a

  • SHA512

    bf01c536b2cd40d29b34bc915dcc62ecc481e495ea1f0321bb4dd7caf58346df3cade7c970b81300c9e3db06b0bba2768894b0d06b99f8e3f71c650db2917fbe

  • SSDEEP

    1536:ATJGs38ILTWYHwgkQVi03l9VQMc0zWzrfjqH3cYXWYpO2+WmnCBwnXwSZvFamIa9:6AIOYf0Wvjc0zWzc3cYW2EngmwSZvFJR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67069c7a2db2eb2d0ca7330e6d46fb95_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2472

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7b96a96baa360c182d043ad44a4baab1

          SHA1

          72ab886593ec0c112abecf40e38f4229026820e0

          SHA256

          13282195085f039a08af711f25ea92d6524c3b29278b8d6b0abc1aec9fb6a0ad

          SHA512

          1bcd4b0c0eb3b8e25c6fef36f883803fa7e0d054a32247311f8eed9d082d16c190d7f0b83ddb99f0d335f3d1585f0676e9fada6b5bd17a108d50e59d120e884f