Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 22:09

General

  • Target

    f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    f46fb9d81e80913c6b6d51a332e660e9

  • SHA1

    74913e143cb8649a2290b69fdda704e27cd5c30e

  • SHA256

    f00494d35f2af018d5a18d0cfc5d62f860e38d638fb38f3e59bed1d6314ad039

  • SHA512

    e5e10209cb92cbf8979806e3eb777f6c52744c2701abad5b9b990e569ee205f23d68251cd3ac2320d722f3975546f618b13fccfbadf232ad43bf147bf14f24ca

  • SSDEEP

    768:bMP6ygcZh3xYjug4VMSqfck3kUQb9twyUT9gjafSUAKYlv:bMP6yLaui32rURg+fSUIlv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          24afccd0b560b4a5105eb0b0cdf3c641

          SHA1

          9339c300fbd8684818e34072350291534b2eb229

          SHA256

          aca06c037c3265762a28f3756939a1a21d7898c393f1dfe0ae5742f4b6c16ff6

          SHA512

          d61ada19001bf70419b4f47954866917f75657136ef7dd0b0d3ee401e895d0232edcb6f85cb7aa37322fcc4a6f6e11876350548f6073fa392e00c2a4d687a3d7