Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 08:34

General

  • Target

    1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    1d737bf272e30db1e3f53f5935e188ab

  • SHA1

    a5832cf30c00586428e600d694dc183c50767e4e

  • SHA256

    192ecf8e438df9cac133aba13fd002757ab762da321c9450c77b10a02b2ca72e

  • SHA512

    2dd8e9bbc2115cf2f2b08e295527458c23c593839749f5386cb91fa449cd3023163f6942a4bf3d04593a61ddbb499c6cead0c6c27604a9ec1e8f6ccd49628979

  • SSDEEP

    1536:WenEHlDABfeom7+9Eu3TD+hc6YBrPnIMHTmW92sFWVVOFzVbUmmcb1Pu4H9c6Wsn:IcBCHmTQc6YBrPIMHTmW92pRmbRdcR2R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9a1e2a27941edec3d25f72f923ece4df

          SHA1

          7bfe21f859a185d298020055e390c446d8b01428

          SHA256

          3e5d244f019b8fff1183f3a1a2bdb7077310dcf5017b60b2a6b95f5aa1b0a16d

          SHA512

          e7548de34a1c7979be962b311f729d7bc6e4931eebbb801818deee1779b3ff4ce51d6017ccfd0c812056652a2b47f0c300106b2b6e55788fecfb02755197d3fb