Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 01:39

General

  • Target

    155a359b72e60fd4777fa855b37b2ac9_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    155a359b72e60fd4777fa855b37b2ac9

  • SHA1

    7f544e48143522a0824ea5adc5502e16c297587c

  • SHA256

    f501d3f84d82412302374b16ade22fe80fff635a02fb50325b3b71a89aaaf52b

  • SHA512

    6edf1aab2f9a5c42c464989136dc71d6d224707e27388461574c82aeddd12a830e92b87fa4d36927f15202a4ef33c647d935d0560b77ef9917cb8dfb0bf1af1a

  • SSDEEP

    1536:d0OWvcbnQPMTQaPwuTt59bOHRBIIW0T0rai2uW6pOu2mNZ1hy:2rvqnQPcQHBBPPi2ru2m7a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\155a359b72e60fd4777fa855b37b2ac9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8c52682afadc84c5b01dadf93934f0dc

          SHA1

          0f1ae071e02e0baeaf54d7af43c82b9a774774ba

          SHA256

          4c3b4fb69a1875c6e6e1e0957757b741e4b56979f2f9f9f3d97fe1720899d38f

          SHA512

          378a3b0be41a8d1726cfd2b82713e933021500fa9f9549771013c0b84362dd666707845703b459a590e0eaa0336d01656d33fb251d1312fc07c98c6ad1f68455