Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:52

General

  • Target

    1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    1109b8633d67919434ae2ccb5a299e46

  • SHA1

    f1b9547cba64b9c6d4eb1311a5aec9c04de5bb23

  • SHA256

    391395a210a4474f38a4751065beffab5ea0bea7aeeb1abf72365002232c4cca

  • SHA512

    0d28e49277081bd0be5be3a79a7fab9b5024775f5c971e0ed81ceea1692b5dd2334bf59cd15ced875902aa05133fbef4814668e31730544758584d4134652de5

  • SSDEEP

    1536:L/AIoHqh55UmPXfYWiEmM+Zd8Aw6jOLWpnpvEuqc2MJYWOpOaZfnVk3te:NosnwZd8AwCOwnp89AJVaZfn64

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3efdf3528b177eb2869a70f99961c698

          SHA1

          8edb03973f1988fe899352fd97a9cad4c1e19458

          SHA256

          4f77aa5f3766e8a27f54b6997b35da75472e7751b129c8f2cf55edabfcd3628e

          SHA512

          360a94e7ce28cdf801a85713eac6a5f6eacef6193e1e98f2a34898393da00015b3255fb0e5aabf44e9c27afea13d89542b826ab77856854ae74310d011596e3b