Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 07:34

General

  • Target

    defe5699835117766b1d723d56570c94_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    defe5699835117766b1d723d56570c94

  • SHA1

    edd704288ac90ee6fea21834c13d32d7dff23b64

  • SHA256

    1c4570f529191af4310f42d49b43662fb8b13ec74be7c4f2b76e48c4c386ff4c

  • SHA512

    39087240c2c47fae0d4807010aea634619837bf6a172e7ed80031e1da899c74ca15181dc31efff0429257f36e43ac6908099e744bc2f23b09afce3b53a363430

  • SSDEEP

    1536:3X7lNDCVczVjg7b9w70JIv9Rma6H2J85RWnLqD7ZpcW6WyOC4tkIgPKWspO2Blw:ZNDCVczV07be7kIvx6WJ8qk0WMb4tFgH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\defe5699835117766b1d723d56570c94_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0bcace1ebad70e58372f9c126daf4e4a

          SHA1

          fd196d22c3ca88accc24349b960c31c43fa6c7ee

          SHA256

          a403f6dd2d9e0abaa1912c744c6b63dcd998c55beeb0a9673551ac6f8accea43

          SHA512

          c29c45cfc48283f48a654549b410bbdca938c73c10677c4bacdfac031c1b8f71c8f9a94df11b9da6d311a7cb2c3f611159cf49481031b360114bf3fc9df7d87c