Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 22:00

General

  • Target

    113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    113921fcd2e41ea3f095ed81daa969ff

  • SHA1

    464350a0dbf841d045c59769f7b70e0d8957dd9d

  • SHA256

    a919d8384d0e28121b3ffd5b550f0e6018e2a2b2b28373d90470b4dbbf5aa6f7

  • SHA512

    7fdd2f4aa26b30c39c7d281a638af557f2736c125b150f2a57cc0bd2d48e103b05b11af341baddeda924931cbae2a0ed1c59ea95e59aac178f0037380e3f947b

  • SSDEEP

    1536:ucHftzij531I4V4Gicr6O7gVSeeDQwJNyvzcHowWg2fn8i2IPWhosWUpO7sEZKG:T4j5lI4IcrHkVSee0wJNybcHL2fn8lsH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2812

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b4af3a6db865f54bd4c6f12836612e60

          SHA1

          50a7ae85405fe6dd32aba09cf80f64fbd5469bb7

          SHA256

          578ebf26188772c5265da887a96334220433b5d4babef1f28c6059aa973627d5

          SHA512

          fcdff14e0cdea75e32c4d60699393b52341c8766ef519d85ce0efa77dc997b3fbb9e6da6112652a76781d4c344dfcc312bc25604d79ce9c91a33d29f1c0ffa2e