Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 13:56

General

  • Target

    f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    f138851dabd7e0b3b966dce693d1fa28

  • SHA1

    38560683ee2755ec45dc47b4245d85e63684c1ba

  • SHA256

    bdc236f93fcb6dc12cbdc5bfbd7abba9d72117e6d54a2ef577f0c654334dff87

  • SHA512

    a607db3bd266c05350497e68040a3ce9f4d9378d4a21983f936bac2e95f27be8816b4af0a5fec423ef53d9d1e11b88f8f209318847c8345c8ad43af7ba19a03a

  • SSDEEP

    1536:aykhfwLvlak+c2eHGwpSeOqbFoPo4UcsZsBtvWxd+0QqcLNW8pO+WIL:SJavlakMeH1pSeOEQfUcM2wdlO8+z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1260

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          46a0724362f6fe72c96bc5848f68a06c

          SHA1

          3f1862f7bc96a7c2b62684123c07eed06852914c

          SHA256

          2cbb5e69b18f3b7f023cc47aa9fc499d8490234ecb453ebb422dddf8eb0e519d

          SHA512

          52d52606a1467a663263b3706f8cfa05b005af6e263dc4cf888f346e9554bc8bedfc4bcd66c1235df87177813171a10a4b0d817d87044c9dd45966927f6f9985