Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 00:01

General

  • Target

    1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf

  • Size

    95KB

  • MD5

    1348092a0ea35db41731049bf9800550

  • SHA1

    61f14f958f0ed25c76df7a2ea989964d89b687e4

  • SHA256

    9d68aa3cd585afaac68bca536db569eb2c8244687e1d2fe93b6c01c607337db5

  • SHA512

    930d470db784e84e57898347e700fe1733ac44cbd51bfe292ce6cab13c4f5e18b191953236b4b52128b894f6723e02d07a78b3984357ad47103051abbac0d4f0

  • SSDEEP

    1536:kix7I5TO41nYWFdwPAb45xKCrMOUrWUEEeUo6Buzgo4Ycj5RX1F1kcJIeWTkPnXB:TxmTO4lYAxU5xhrMOUrWzEeUdYYYcjRr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d5ceb7f8c5a4ab91b1af309de2fbc490

          SHA1

          ccc23c5e06e39d1d992b2c542ec24a23462e550e

          SHA256

          fc8cf4d9ac94f0067c9f8e298bf7fff1ef4653bede614080250d67a57f4d1bee

          SHA512

          68f0c7b68bdafddb2aac4933dec093bc4d0ab2053c3869db4a2d64203b4df3a634a32f15a773635b66fb1f9b262b5f61281266d74a910a5a70cae9a16682adfd