Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 22:04

General

  • Target

    114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    114c33bfe941f8026a9e6bcc53544020

  • SHA1

    53e36126224cdf7158901afd008cf2d856c0743f

  • SHA256

    41027e019fee59e48b96bee2cf9c454585d25d38f5266bd86794b28d8e2263e3

  • SHA512

    5a44350ef15423698aaa41af1296f388fac9f45c1462f2d05d0c4ad737aff897d74fe3b01691234ee9bc2f977a9adda6282dd880c2a2154cd88f6fb67f07f483

  • SSDEEP

    1536:ZycdGvY49J0ft80+Lt9J4N+AABtGsWiljMInOGGB9ZuWepOZIIN:MMYp9J0ft8Zt9J4NsBtGnInxGRXZV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1116

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e7b6e4487bf5a871bfccb9c7d8a0e899

          SHA1

          fe498d450c4b8065fc1d8bf97e4e3356874eb94c

          SHA256

          350c83197121c8a4b8b8111e2d2d4123613193ae14cd32c2f1a4de88bd75eb78

          SHA512

          a75c67df5b64d91ed51a4c16120d136b9c5b21dc9fe238c4146be98a0f2a7206870cd738c5497f0019f747947264b3481f035ac14dd9049b60c8fef4d43d73a6