Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 09:10

General

  • Target

    1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    1ab7387b7caeabe208d8ee292484eece

  • SHA1

    0367f1d85beaf0b759120b23cd548f0ccaa6aba7

  • SHA256

    1bf249245260bea99d294bb864e12bf49e4975493970ae1b88fd9b2a87c6852a

  • SHA512

    711c7a4adc7217b2b86663e8efe6f7ccb30be0c5cc7652cb09ddb36608e2c9a3805ffe0c2a21ea8a92c1fe9c578270e1f0dd648d8271d9744c06c112bb22e0e7

  • SSDEEP

    1536:l4qM1mxZxYKtLDaKLFr/EIGw5rMHNPWHpOvTWV+CNJzKvVxn4K:uqwmxoKtLDam1EIGwZMtNve+3vDd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d4f98530a98f35f5c2d802124c97f137

    SHA1

    98f639ac7e101566ea5778cca24982a1f1087af4

    SHA256

    81202ac69db7ce9707696a2f733643d9d188d7a96c54e91850987067d1b9ad7b

    SHA512

    a75a2c1fd302eaf1ce6f79097ca69b7d0da981166558a91ad6d231a4c664657ae73dd1a58b40fd9d0ba0f9f61c04e5d8e2b39a6430afc1b37c347e1d28d1d5d7