Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 16:43

General

  • Target

    273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    273c4391509e33db0277b897df36e02a

  • SHA1

    6528b0bf12848039568c9816df372c89b575f60d

  • SHA256

    f55d62156fb164ca945c5f946e7a0d4ae116efb633915c33cd52502bcd003371

  • SHA512

    c5148a7368e4483d7742dc59fafc6ef838e02279b99ff7b80af28d6b41ae8a01ef42c15e3eb9daab1f7dc87dca49003050c5b3e9192869cf06229fd7681e6321

  • SSDEEP

    1536:owifGRmGETlXtokXEWMviHrAbUUXHNr7CVbjz2Wxa8xUjnahW8pO+Xid:OfGIPTZtlUVKHrAb1X2fzjaQUjaA+s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0813939925444f572baac4c1fdbf9c62

          SHA1

          43af8fb98470e3ab0ea3cfe10013bcff4d9ae1d1

          SHA256

          333c947cfa42e9ff17d6e71abc5b1093b6ff08bc49fd7895de2385563acceb4f

          SHA512

          2eaba74f575979d85f88aad9e02ec195e9e6e816a24f8adb15d54a7f4ef897ce2a5b79d1f0a7a2d7e7f740852a5a9ac79b29b7df5021b2f51cad458f27cfb74f