Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 19:01

General

  • Target

    2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    2a311645491cca0c221e421c54de303a

  • SHA1

    b4bab85ea305de8253ee29941fa9e4e22859ebed

  • SHA256

    2dfe4f4cc1b0a5635b5aa7d7f4022f4daec9cb0a1cd29f939949ca1424dc79a6

  • SHA512

    b2ad855a1d561983c5f75bfcc1fc5b8f5e8ec49fadfc62b88dc8b5c9e845428cffae6453cfac0a3c905f47e1f14f534645b8e4ee191895c7f52633c19e82e7ad

  • SSDEEP

    1536:wAcxIgRd7IgA1aK+7J0aVH3/E9n4Hy6WkNpOPaW1x4oFjn2b8Ty+VZTpTo:cxIgvnmaVXsn4Hy/PdPjI8Fm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d07c4f448594a1fd1ff4a291d4560472

          SHA1

          3626617ea3fbb0f9286bd827d5f50337f0a6b1e5

          SHA256

          d934f74269c60860eaa383d9ab1d09d75f37476a15d5eabc9b1e21efd33ab1f5

          SHA512

          fa63133d4c9b99727bd095a126e08b7f9254fbb8e57ec72302fd43b1a5ba1bb9f734a152fe398c1893ab46c4a77ae53bbc8b487f55e47d4a6752e520ad9e63fa