Analysis
- max time kernel
120s - max time network
137s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
10/04/2024, 18:47
Behavioral task
behavioral1
Sample
ebc00897b6a4cdcd027ba2a6e8bbfe13_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ebc00897b6a4cdcd027ba2a6e8bbfe13_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
msf.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
msf.pdf
Resource
win10v2004-20240226-en
6 signatures
150 seconds
General
- Target msf.pdf
- Size 43KB
- Sample240410-xfpcqagd68
- SHA256 ea4f7a889e5f963e197e473218bcbbeac6096156cbcecaaffe40a389c4e24594
- MD5 7f16b371ecf9b607cc8e8cac6fed7fef
- SHA1 6c53f0d426ae1ffccbf97f4c1ba48efb2eb7a363
- SHA512 b436643ffbdc2cb2915d62b25e2f20113b862c0c968bbf562861f9b7abb949328b3e2a224b72eb4e1ddd65d553e6eeae7bb72aa32c1e5f97ea109bfd2e8da9ef
- SSDEEP 768:AfdXXjRLmWkrnOAcOJRzp2QRouGJvW6YHz8KieBmXGoWgZv:2XjRL12OAZz+vW6YHoK7m7
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1196 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1196 AcroRd32.exe 1196 AcroRd32.exe 1196 AcroRd32.exe 1196 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 1daac98a1288e3fd3ca09b42fd97b1a9671add0ca66122212265ca46e99d71d4
- MD5 eb4be80ef76851819a00e67911912de1
- SHA1 fd80f88ba88635828fc77560cac33e2431e9b13c
- SHA512 1f913fb36d0b9966ff27aee42a7fa392bb2fbac311c159c0769584f2341e96f1221219fec84d33818b422ee05f9b8cab60d2737839232714994683db423d038c
- MD5 SHA1 SHA512