Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 14:12

General

  • Target

    079915119b16de2995809ce5969c937b_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    079915119b16de2995809ce5969c937b

  • SHA1

    69cbdcec22b57e6ba5c25fe636451bacd30c66fa

  • SHA256

    2f18b12f4ccf949dbb5af6d56953bc3c7c5b4049a28531a6b2401a689f01aa44

  • SHA512

    c1c023fa5e3f7354705f0cf3bcf31f31fb533edd1557fd7c0527632c1ee3e1053541c07238993447e69d5fae7ef04bea0d29172bba10b9efb1d144c90921b6a8

  • SSDEEP

    1536:wSq4hb78J8coqVORVSqrMg7q9zR/YT83faXFQ0NagWr6/uG0MbU:p78JfAEqxqWCa60NQr6/uG0V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\079915119b16de2995809ce5969c937b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f839ffa73f3f1c084c5d7854f009051e

          SHA1

          1a250269ff9c241a6176132f20869e9ff5afacb7

          SHA256

          504d187dda1c53621a423e4942781404f0b8c6f134774ea89e69d525db760f4a

          SHA512

          ded5a34c20e02b536ac95133d3165eaa9d208ea3dea978fc9563902c34e5291cc439789012d1c908dcbcf101c23f60f8fd137da56669cf7c7edd088d3e6a6cad