Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 17:43

General

  • Target

    f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf

  • Size

    99KB

  • MD5

    f19f738f0de529aaef6fa521e6490550

  • SHA1

    852d430db4b7bc67fdf4b3262fd4be39de3e7e5c

  • SHA256

    df7e4e9b8f0f1008bc0c2886cd9903d2064362dcf27296286a656c1bfdd9f53f

  • SHA512

    e5546d19600fedc469c0a8599a8fad5c97b566bcbda47f5d0364398a243871304e79917029b76d0e3a9ee150e4894c72453f625a73ccc97ec1f4931e30544297

  • SSDEEP

    3072:9TAd0qJxA8+iv8y80uVIX4enn22hZKB9I:VAd0mAUv8B0p31Zt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fe176b6fef10b27984b89b38a0f68269

          SHA1

          b98fff19385a141ddffdd34ce81564fbe5ad2455

          SHA256

          3a5beba886de348e467a82fdf5fcb1137611db023ddae0bb77e168ba0de9282e

          SHA512

          e907029abceb4f3b6c5216f5c7032374baf49a6a7d2f3448f230a7d44b5a3b8c5ae6fb3c1b1d1cf365a1037e767eb5e79d293d77f1a2dbd7f4a47a63986f9a79