Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 11:41

General

  • Target

    ed56323c479e099790de584091668511_JaffaCakes118.pdf

  • Size

    100KB

  • MD5

    ed56323c479e099790de584091668511

  • SHA1

    85ee3926875aaa5f783949b9b61cb522811fa30d

  • SHA256

    cdf0256cf404ca2f12d338ec2695faa2318446c1556c1c999458be64c0181dec

  • SHA512

    ee12ccb93c4cd88f87ecde6d64243773f9a04a02eea9a3962bfee7bac01704c4f2ae2264ba2a68a2b5d562898c0c94d3f39cedf5e74f7a31421b2b76243f4ac7

  • SSDEEP

    1536:al9+BPIQ7y5ac/Mp3XTaj/wIQrhNTuJniE7LQhDsUwWkNpOPQX0Y7WvhpuCWb7:Isy5X/cq/wIQrvAiqcsgPY0YUGCG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed56323c479e099790de584091668511_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:808

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          124a77f3abea0c998ef7bf96653ed538

          SHA1

          8c8b657e5f4bb8747fc330922026fe7028186783

          SHA256

          e16da6a74acfe92c153b0af9156ac643ec7832b21dff934841807b6748e990ff

          SHA512

          eb4e598e7efb0dc792cd85ffae0b49dc6f203231ff79c8655b37518af772f11196edc88f75924218ffe3a75cd28f0ad5dab7045ba2942b448826c16b9536128c