Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 15:21

General

  • Target

    d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    d76c669d2034c567a330d5c23f52bae3

  • SHA1

    823fd96783dcce58482b5fcd4b4721eb2e56c357

  • SHA256

    e83283d1523609a5df7791052a5b2cdf33e64af8791eb7395e9b86358980b25b

  • SHA512

    19786128be15c58953791768c56ee123bfc08230a2034cf4a95a60dae5b4cc52d2e67edbe085813755018bded06ed43c6d58b23960b38228125af4884e3dc69e

  • SSDEEP

    1536:2K8rvUDh97E//ptYUVZFfbVP6Lo8WT4l/69mxyIEl8LWQpOCt35:BiUlte/UOFfhPRwxwmxdA82CD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3ac39954ad31ebddd4f8ad2bb11e3acf

          SHA1

          873f3f1b057de7c7b16f59876c753e545244c46a

          SHA256

          a94c91e52b8b63181ea052625bbc5132341dfebed1722bdd66b7926ff468ed41

          SHA512

          df240c943297916cf85d1c3236503af72a4e0c9a79ef485c5b60a83b584e9473ac63a3fe58a2aab5c3bff06872b504a49fb91f05029257b08d12fb6147d63647