Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 00:40

General

  • Target

    14182deed3a60b6605b8fbf4dde147dd_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    14182deed3a60b6605b8fbf4dde147dd

  • SHA1

    258a15e4ece40d50e124a9f22dbcd21080a1afa5

  • SHA256

    943764de63477fc474ebaefd0d48894fb76592e6d41e3e40bfbb5921f46cddca

  • SHA512

    d9019de51c58599b354d6b97e99c2083afa972e7bd4a192be17d56945ba2490d5a2fe2764431ead88a1de7746e07de2440ea9bd33fe768f70e603f0b68c6ac3f

  • SSDEEP

    1536:1qRKecXc2RF69Ug//8wZvFtJVit/tWWpFFbCROAG3qW8pO7Ojpo:4boc2Rjyk+vfJV0jpFRoOAG3x7P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14182deed3a60b6605b8fbf4dde147dd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1db4ad6674a87bd3fb55b12173ea0574

    SHA1

    ae0988fcfa41bd486e992fdc977f965dfa5eca54

    SHA256

    c6137d3e332594bc9407e53ec4256f2cf7de99385b65f0f1d994d167a25bcc25

    SHA512

    bffa2514c87711633c9b6cfe1a4669d79475a0642b560aefce229b3b010b1ac74263f438da9b5977842b306c4cf5bbaf1101aaee2a22eb570599f18f8f71bef7