Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 21:53

General

  • Target

    110c18700f07661680a0973123a9847a_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    110c18700f07661680a0973123a9847a

  • SHA1

    9247b95ab468d76ad21f0d25154c04d4187862e6

  • SHA256

    55820bd1c1e0aec341dc472d92fdf948abd3b858bcf1286a1513ecd70428cbb5

  • SHA512

    398db537e82643c93f8d6a5d4c5c756a8525e701e6da7bf036c9f4a6d7ace9e2dec563bd7df9af4da8690e2c160d428f353404a23cbec06311e769e395d89023

  • SSDEEP

    1536:hBY5fL27GbGy+31OxgEuQCNHnzKrNM05I11CF/ZWbpONiWkkH3FaU:85y7Gb23UvkerNBm11CF/bNhXX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\110c18700f07661680a0973123a9847a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dc7a3aae6058cd337483c5ee77063fb9

          SHA1

          97dc82a8d1726976af90375704dce12dd4b3075f

          SHA256

          008d8adf804dce48a5ad1bbce48999c434ac228fc59696503a721583d6e31d08

          SHA512

          4d53cebf088a4ac1b64b8e58b301e34ef7d74a78c2d4760c2ab0cf3699489df822d896e897bb3fb684425b45d2b151933f5d682dc0895f3aa293cb28cc6390aa