Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 08:23

General

  • Target

    0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    0148ddff1b00ac716a55ae7903a6c352

  • SHA1

    ba4c9adfe09a2f708a9520290d69a8ade4280a1d

  • SHA256

    a46c581e2629b46499ec1d6b1bd4bffb5126ba31aaf81f4ca5e6ca8d64f86eaa

  • SHA512

    3676e53aef99d6c53b3d4b65b47606183dc48d9d29a4f56bd0683727b830205d6071e52ca90de36580de0ba881bd449912186dd564a9c1ae70ec51d0b5694443

  • SSDEEP

    1536:QAL37AS5C7q04rSKqlIAtBzYwHMW0kqdbOWYGcwpOuEWQpOCVEQgTGH:v/Ar7YSKKIAHxHMW0kqhmGcwYuDCVCa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ac485cf68012db35706b358406ff9f02

          SHA1

          d800542e3269cb0749dd83b261295d7bc4293382

          SHA256

          0b128c9f4295839d78669d16ccf813d0e810ff212d0a1ff4e02748dd86279c82

          SHA512

          6a133e9d4378d563e2d96055ddbac5c7ad7cffdd164ee1741034f81dd911aec87c6cb00ddee5ce12a22d7e5c3c96574975b7604ba852ec52daa69fa8b7ee6f35