Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 06:52

General

  • Target

    1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    1b70e7a18e6414121993395dffa28590

  • SHA1

    cb380d2e344e4131e1f2e5025950a3a17acdd58e

  • SHA256

    b05843e41207551ca630324ff43946ab24ff420edaf2ab9cde5c1c6fffac66f7

  • SHA512

    8a44f0afbe18269906a2341c396128da1eb820286364a53e6e2457861f954f63d6fed71ae597afd18f6ed3034ae37585a6342fa811e9a84724c37d109e76ec60

  • SSDEEP

    1536:vcxop+Lu7VI2c2v4cSTOjCbOJHTYyufysR6rwcEtb8H/AkY63Wfj9rEuYz3CLuay:0xop+LONCgCb6zpsIwhd0dvq7YzCLx03

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4c1a7faa4a1a8eb4e28da4e0a3f8527d

          SHA1

          375c918dd74b05ec5c5dc53eb6129ba1f778bafa

          SHA256

          222d82304ff071a4243d1eb33388f8ca00dcb598a2fe9eced673c923bffbda81

          SHA512

          4a1d5357f3fc877961aa5fe579603ffdc3477196a6171bfa96041b3aee98fe52c33c322d8606a182ccd4996f43f41b5aa102cd2267743d8bab8a27926a0d25a7