Analysis

  • max time kernel
    117s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 14:00

General

  • Target

    eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf

  • Size

    94KB

  • MD5

    eb3aafaf7ca0454d779dddcc4d347937

  • SHA1

    887a13bc2c298d1ba7973d2d3c175dcb1daea837

  • SHA256

    c63f176474f8feec686e2cf5059d1223df626f585a4b6b7624085d308c6229a8

  • SHA512

    9b07b1a5f00069ca99f0405d86c318664c499ac1517c9a2e516b0d3abd37357a1a2f5a3da6102ce7e0a1530f9f4a25ff307dd65ff8e94bc74b6b24315653f698

  • SSDEEP

    1536:wDllkNxE5QB8VVd0bu+tTgalTisVJj1V3Nd8CYZkkZWbpONOfO6W+KRflhN4m:O48CbWGisj1VnFYukbNOmMKR7z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          04b6cc1bf397ebfdaccc4e3a38d525c6

          SHA1

          bfd2d10a517b5c2fb2234a52a217719a723df9ad

          SHA256

          809e204de307b1882286e80ec7691c67b054e7b7bb40978d645afa41d416afdb

          SHA512

          c0ef56878546f62ac8663d25469eb248f01de18454a35076e53e7a51167a7deb97a2ba6a99d9d3edddb0f99c9ce9eead4f01f4b26949721c3ef7a84b6ef463e0