Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 16:44

General

  • Target

    e7eedb3eb851ba06c23f4b7124399306_JaffaCakes118.pdf

  • Size

    130KB

  • MD5

    e7eedb3eb851ba06c23f4b7124399306

  • SHA1

    f310dde1c37efda5bbee1b6812cc7cfcacbfb729

  • SHA256

    1fdb7278178707f5acbf2609e3927696d9644ebf2a088197dbf54b6b0caee6f7

  • SHA512

    d981eb97f2f2deae8624874f105de1516490155cc868f722c77a90da848b1e915c8cae8f0164cd3dd7430461839124a156b8eaf5a5bbc49d47b1ea1b5111c234

  • SSDEEP

    3072:rf8dSQLRxM4bd9Z2vfpo5lnqf5Px3E4D1ZFC/Q3xJA68BTOMK+yW/oUWXFgPP2f:o4QbM4hH2vYlqNx022qxGzVKLKoJFgw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7eedb3eb851ba06c23f4b7124399306_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3c1429baa104fc7a0f566c92736ece8e

          SHA1

          7ab179e63d307de50a7743ef7cfdf79168bd4cb9

          SHA256

          b6363933f6f0cb148aa4873bb6eb0a8a9faf0b3435bfda5a28ac867c2698682b

          SHA512

          92b6e9e6d395395592a292f4277a7727aceeaeefa20c256dd71a594b3efad459feddcc7bfb10008f7cbdf60a7f8e7792c5f7bada3c17c8db911e5be809d71ed0