Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 13:59

General

  • Target

    075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    075a9d366bea12ca7971e1448e4a23ce

  • SHA1

    75069be508c89eecfee820360c06d6b7a1ae88bd

  • SHA256

    f0d37aebb5f8f01959159b43e83c31eea694df7495a8681166ce8b63b743a955

  • SHA512

    1d28e77f5a9815d8178d55d0716a31fbb5fe800d058c982ba2f20db43b64b9c1e0fefb1d051c938e08d14b585df135a8beac85d80393c587a6071326b932968f

  • SSDEEP

    1536:YiT4Spa4advp7mRMzakTJBLjP5twAKu/CcivT64rec5:5Jcea/CHL64L5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          261b864c693491cc369e55346d5dd508

          SHA1

          6769eac129ae677f1a223fa63a8c9da63a00880c

          SHA256

          7b12724af85221057ab4a115e824d2ad18e1fa2f6a54001785d64d1c4c417e4a

          SHA512

          aeadfa264cd5fcc6b5a84a31e4fd39e4e0dc81631d97a0dcdcb337517d2c9329a5507158b446d7741777390436d9a168f624d374e9d745d06f731045ec720dda