Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 20:07

General

  • Target

    f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    f1d27dac1042902fd2e4a1652c60f632

  • SHA1

    51066e39e812f0937c2c6db319794542a3756316

  • SHA256

    a7b17c7de3c976545485f671f33b49400fafc65e64ab0137d1f05c3c1afb3c2f

  • SHA512

    159e4cf2e2c2af215db79737310ee2b59e7168a6e11f8b05bf4bb116428fdb5710dee7de757e59cb5dcb1a9837bd4b2f49a72c7e0b43e45362e77b2ecbb41e8c

  • SSDEEP

    384:y9oO0lxMpJoIBK/QpsNeqdHkJi4/HrwO1NfOHFkVFqCUSPpVNtnJ/Mg61DaP+k5K:yvyx+oa8Qps7dHkJiUrhkkV0WVZOaGYK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a97473798ca4a2d793bf8d11b5bb0ec5

          SHA1

          c75f61d35e9d1f8920d84e3f61ebc67612473663

          SHA256

          b41195efae185b14d669fc91debd042af7c2b28a6cef8663b6ccc13b68b0a3fd

          SHA512

          99694a0e9b84939ea82de5ebd801c27e18e35d339bf9bb2a9a80137cbef75637dedae4e6a2045da911f8692e6e374a10573f16d23a6ced587a819678eb240ba8