Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 08:21

General

  • Target

    014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    014208ee3b5fa5dad80ba6e5244472bb

  • SHA1

    7831771e686444ad51a46946c3c9b61b807b3f52

  • SHA256

    60aef3fe24d81dc96bb4340895c7b98ed256f46e5f239aa2860468a5a9e2c583

  • SHA512

    48ca2da2861700035030fa4beaf6aa5c7c610deea87da9e6f17fc96907f6f70166cc14eab1545abfdc72f9cfab05180842d3702fd677d0c93c5a472cb8a3af3b

  • SSDEEP

    1536:FILgjtjx6531Fm5V1zsIN0Mt2xLYXWkTp6zahkyC3WwpOSK9na:qLgBo5FFmf1T0Mt2xLYHhkzKSp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b1ba4c3cb1533d86deeb730aff9b083f

          SHA1

          c7b7a3ae1bc85df1ea6e3ffd103af9eeb12049ae

          SHA256

          5e6e8589127bcd9a19676db6e69795a0b9f7ef3673b5812576ae24a8fca09aa8

          SHA512

          79cf0d1e264b4cca77e7f952bda2beae076c7cc880519db23539938f069addd88eb2d5482b52c66cdc5d41af60a9def3569d669eb96c165c914f236083362552