Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:26

General

  • Target

    106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    106ea5be32403e0b8aa62fc5550e2a34

  • SHA1

    5b72b6b6bab7456bf83db9bc05d4519fbdbdb9ad

  • SHA256

    daaff802f5882bfad1f5ef9f0ff8284cc8b6dd7fc255c8acd0a6e384d68ae702

  • SHA512

    b8dc400568948b8d6a09d721b7c6c81e9cb3f01eb674cfec8093cfd9724113ce9e1cf6aa69fa17360befbf2f93d694abd78906ada46577c2c24127a189b128a5

  • SSDEEP

    1536:2MNG3GJAIt55CXjRll3EZSdguSxad10WOpOwrJ2UItW3qs9pJWknyi:zQXcUgTadwrJ2/jsvJWm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2732

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cb6b5e317fcb04bc712f6923165cd225

          SHA1

          e179a0701fcd2b05b52f7a16874d91b7142325b5

          SHA256

          f533784d26aea5abcf69f8a07b1a8efb1efb9a1695f6d62de48117f7d7482853

          SHA512

          fb1bb28fcd18267722e47710caf22648429624d16778e07a1936e828418e2cea0331da88adc868242f63b8bc1ede0a36e2eb33bacae46eb2295db36afd4173d3