Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 04:38

General

  • Target

    e93d2c4ac17f4442b1dae76248c685dc_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    e93d2c4ac17f4442b1dae76248c685dc

  • SHA1

    d2ecc46ad998dd3e159eec8e4e7bdeeea6d90fe7

  • SHA256

    6ae0207e0a1c595dc3cee7cc716320c68e9bcca870a620556cef1f5b4ff6567e

  • SHA512

    4de3f2adeed134a28ab0ec49292d1c621df2cb759e5b33ae15483220367f43ce7967f5c6caeb1e33209f76383531a3c63e00a86eb43424b8b2431ac088847dd9

  • SSDEEP

    1536:Vy6SiCsVpdK1I7M9hkn+V8qVeBFW/ZAGz5FsWWHpOv1ZXQk19v3:k6qOnK9kn+V8qVeBMFu2v1x91R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e93d2c4ac17f4442b1dae76248c685dc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ad1e65d49636329d33c10523833f69ec

          SHA1

          8d4dbd2efe1cae6d427511f6c9bce825677d29f3

          SHA256

          52bfe6f9b6fe93f4e6f1c3c9981581d85a416f45899171b54aac05f683f4f55a

          SHA512

          caae4e3bc35da8f59fb12f2e750a0e3884faae7af1a08c8252b7c00b111cc4c49a04b14b71961bf6c5b1d31583cfda0ca9e455da6861c3517b267095549d36b7