Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 15:50

General

  • Target

    2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    2607ce9a446f608cb08e3a362ed3245a

  • SHA1

    ea8f8d4fe63aaf2e9ae30a64c6cd43f29321f40e

  • SHA256

    d50bd3b301ea79a60b6106bb840d94297148b6ad8f3d38f36e069c12375c83a4

  • SHA512

    0245df60ce90f48de2d2a54aa6909e25efc75ba13a781ec1e02b242f963e1ba2ed3e1e87780fca9a6624082c2ff4b637f23f9d3a806a93499b03bd94e286bfb1

  • SSDEEP

    1536:7WLLyKLEFGUIkoP5wmSlN/exFZiZClktb3eraXkZWbpONiWCoI0MDo:67f79SlNezZi6q3rkbNJI07

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          77e1796ff316aea8ceb6dca7e25ea710

          SHA1

          61d98862fbcacbdfce7e3a3c6f3e6ed0de0a7c63

          SHA256

          4bb5257345d84dcd6b64bb4e907e7ceac59f04f725f6d9f622b7c2fcea4c3d19

          SHA512

          de8f81b9cbf6bf60111434954008da194c1f382b7b71ed9e354d6e040d6c17d71214af5ed15b0fdb8b53f053a9b17782e6d0f1f46e6b4cc3594fd27f05aecc05