Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 10:03

General

  • Target

    e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    e20f521b69051fc88eed4fd77bdba2ef

  • SHA1

    78befa135e70a0d5776b24b2f4b45345a6529e03

  • SHA256

    c9c72eb401b9db774de4f3001ec3c16b0a469ea9b5584161d8e1bece39f9ce3e

  • SHA512

    222fe3ba4653fd95d4309f2aa18eeb6af3ffe4c61281ff3c7da42a444a9cbca40e1484aad28b7299b3d2e1a4fdb994dfd6cd2a07db4005e3876e3a5ac6b35c31

  • SSDEEP

    1536:kNISAw86qgFe75t9q9xY5GshVegzZbJeNvDXzWypOlLhw+jWDla3S:jw0SYb9q9C4KVPQLXslLS+g/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          38b0592105fbbc962214b0d104a54f81

          SHA1

          f8904d2663ae9c0e65be536cc693c4ae4a660dbb

          SHA256

          6ab6e93007925fde2bb99b2e00ffc34b4745b889f9b4c578a5553249ab87f43d

          SHA512

          6cb022344566442fe6f3ed3baa44d55cfa46186a2bdea682b8214b0fd838550639a298dee58a15798d34ceaaa15d7d5e67e22cd5887623e346eb459bb86be204