Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 13:06

General

  • Target

    ed7da126f6892a46e3ae2d622a7f77e1_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    ed7da126f6892a46e3ae2d622a7f77e1

  • SHA1

    5356d9b6d011d1eaac4cacccd5c843986b177bae

  • SHA256

    3c2da8520a0180247b80356092e66070056b9ff13a78b8f67b933de32cd5d479

  • SHA512

    35d88ef89151caa44d8af37a757bf73c4539e8a28ca9c1c3139b08eae75bc4ea6e437992258d380015e1adf154e18a199c3c84a03705049e4264b62675315d52

  • SSDEEP

    1536:uhursBtzukcQyGcuXaTh54YDEUKEMr/y7X4WwpOS9WBjpB3THNyKDS8pcNM:GuSUkcRGclTh5bjvMDyjHSgBByKDSA5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed7da126f6892a46e3ae2d622a7f77e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cdb02464228020b5eda15575e644d648

          SHA1

          0d01a542d79bbc8ac0fc6ffc41f801cde29fb93f

          SHA256

          82c74b3aedd3efadb3ba2c4ed0d46ad5db865b84a874b7899d9745d28e6d8d9b

          SHA512

          80142cb22e67837b23704e95d843c15aa3c718c82e9cc5c5af228dbb9bbdec1a756ac6a58785a75aa3d486a7a2ce71b84ec130f0deafcaa4ad22e09895af4f67