Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 09:50

General

  • Target

    1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    1edab23ec2732d4780e83eac29472112

  • SHA1

    20141501393d5bd7cb1f9003ae45b83a68fb3591

  • SHA256

    f01b4e7a77e85172e15729b9537afe0326386126577f0094f52b4dd1845dd2f7

  • SHA512

    5cc8a25a71eeccb7e9ee88bcdaf513f977d682ff301de055b9d9563b28c8db06a5572af643ea31aaf6e32af94d4610e397103aa26c7f726e32b97ab3980d1c45

  • SSDEEP

    1536:3RXRC3JldV0eVTe+ZJMuY3oW4E1b9GDiD0y3Wyf4SJuhxwM9Dw+sWNSXCSIp5pWj:JRC3zHDTepuY/YiDTWyfD+GtCz5u3GkX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e5a908d831194e3e820faaa23b6d27dd

          SHA1

          8120ab30f91f3e106de3b4fd0f69c803a633db3b

          SHA256

          b1180c973b9a2f149e1b86508eb5892f75cd3ddb90b97ea45f7bcd02d4871a80

          SHA512

          06477ace5a444b584e6e19d1bd0d087e46e7629e75b457c8f9fddc58f7ca23ed4d035db1869dd44799811d663dff8e5bfec3e965ff0812bae4581c9275df6ae5