Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 17:31

General

  • Target

    285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    285095ddb85608bbcace30a1dfde258d

  • SHA1

    e89064396a246ec8deba45eb7fbd0e364b13b83e

  • SHA256

    50b326f6b63461ea75966695fae415c98e1f968a4f5c5410295aefafa846253f

  • SHA512

    31d0953855e6a95a730b15ef441c3c0c2d17ed04d569af11d4cf43d5c5fd3f6d1100ebf01263d0969e6819aec81c3ed2154c75beb97f5cbe864f1eea530310b2

  • SSDEEP

    1536:zHDmwXHlV+oquhe2TOOF1PcpssnLZgvEbLWmgeWkNpOPaWI7KRpli+XHdZIZ3+K:vmwVso3XTfuzqvE3WBDPWypTXHdZIZf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          662e04a535662ce6da9ef3b5e1c4fe17

          SHA1

          22aa210e5235243cdae7892f988b5d930b2c8792

          SHA256

          c2cdffe61ce676382bacade3461de356ba2a7d350c3fc3564a2c84d2089730b5

          SHA512

          301b62f9a98b97c0d5230e76741cafbd11b5160b2726713708946747d56d2c9f2329af633a4c49b382acacd8511baf2cfb373523973336de9821c47e28508c51