Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 09:55

General

  • Target

    671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    671abd93d1496f21623e0868b70f0945

  • SHA1

    130e50fa2f9671c2669a6a6a1097edae14435089

  • SHA256

    1b2eb31d929aa139ed0fd378567a367f6a5167d440e1b4c67f3e6ee1d95c4e58

  • SHA512

    5bdc1ea11b21a048f85ffbd3b4be72e61db96360e9fa9afe6f9a4ea5df89e6bf7a9e473356c13ae70728f964ba982d3e1010042f4667c9d3bd57eebc0387c749

  • SSDEEP

    96:bON06mxdw+7/J5pFsWCv+SadxaO8lvCX1+Rm5PpKGNfG0LuTfxM2+Cr306CX1kim:bONbedw+DJ5pFsm9YPsBvaWTU9rNnQu3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          15f0fb1f9f19eb2587d726fa6c9ca247

          SHA1

          c1ee428f3fc356366b30bda65ba6c072604dff09

          SHA256

          b469d468dd7d1a431887ad65d0a3c9727a48ea5637cdc4647dbb7e944e4590d3

          SHA512

          afee9369e09d70567c401ce699a7d73304aff9b268f53e574db4ef8d48828df65827cd043a5b93bb70d72c5b9e93de35b8ecef25b17fcc1295352628627a7612