Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 08:31

General

  • Target

    eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    eaa8d5db227ad0f9c1bf21f34f2ea554

  • SHA1

    24f25723e5e944ef4cbaf27d74337e63a206ef1f

  • SHA256

    866361a1466cc63c151b889a9d353603b5665db3a3c84033eb426534a12dd65f

  • SHA512

    970258a1c228107e0d5edf6a33035982fb59585b6c0dbfa8a08959b2c86034941f6c85f750c3957aaf85b66191e6f7ecd39a7ae4052b8b2e76fb87ea2de2eb86

  • SSDEEP

    768:XfmBf0Nzm3sRAhkp8N+Wa75vyKi4iDjA+juqDnHf:XfmsNShQ8N+W01ynDjzjuqDnHf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c47ba2e7074e960b75e07c5da86ba06f

          SHA1

          92f5a2b65c9a41b82ade71edc9bad15fec4e21a7

          SHA256

          2c55baa282d0736e9d3ff78a6668799466f66c5f836ea1d6875769486672ad4b

          SHA512

          14c0f76afad6ff973ada0e6595afd63beecb15470313ee809df0e59ef8228f5a3c1f6d126b8e70ce3a2e7105127745dc71eee1b4c4c8587ad8880617bf56bc2e