Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 22:01

General

  • Target

    ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    ec158db3faaaafba37a253aeb8e058bd

  • SHA1

    d4b884580c1d6c7bb7af88102ebd655a1046a460

  • SHA256

    6f64657d1a588ca2baacd1498a164dc2d19a0701bd3c0e927cbe9df96e77d4a6

  • SHA512

    f5d05af00ce57844243dccbda54db99d0e5574481ada62df39b76b72d77cbc215f3e735a01add878e80a0a370820755e324def82d7a6c431c637a6928badb453

  • SSDEEP

    1536:8nSM2g5lVXKVpnjLBpqTs8OSznOgCtrEvu+vXrIgpYzsCWGpOKq/M8hWW07fO8Z4:Tg5lVa/njb6lOSbOtQvusSzsrKx8hMBO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2592

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8161827e128b2be3bea49b524d14de94

          SHA1

          df6bff0679c4227062d3ebac015cbee88f5ab8c4

          SHA256

          7dbacc754901d7a9fc65a31044f3c81b4217bb7ba2032a0333b815183e7b896e

          SHA512

          56f814e2e3c20204f3c0ac3f6e2fdb2e965410573e8162cea4b269b43b441db994a97b5e87ec00ee584df56fdfd5312ffc8851d118e742a23e934edb83869cb7