Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 02:33

General

  • Target

    f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    f27be865521f023974c4a645db5a1214

  • SHA1

    de44558ffe74ae1e5aa2a0f2fb4e8a7befa3b882

  • SHA256

    9104b31f84793a58dcff1b64727d63bd9ad9abd45136ac04cac533ce193848b5

  • SHA512

    4c3218dcca2732cf90f2e9d6153b3265a4fadfc8b02dca0b9a3b63a54d8fa11c925c9a2d91bdca374e4235349efeea1819add0614efaba1b4a0d8c78a46eb672

  • SSDEEP

    1536:uuykswkR94xy50bHMrDUbwpQVvbGte5N4ncvT4qnut+alM28VgUVrmJWXccbGlq:VyksXR94xy50bsrDU0CaEQkdnut+E18L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          77d5767a1de8ebc2d75b57051b27da7f

          SHA1

          919fafeaadd881754b45e9241b6aa8425b28feee

          SHA256

          59915c0d0a80a1bd584ccbec04d7950120f45fb5c49ddbe16e683ec0bf9d9401

          SHA512

          82d347176656af01e0b98fabf6d353517cbc933b90341d271e3f3073caf33f0a503d4c76f6fe2b65b1f654477db62d25986201bf671964dc7e2e162069d30c7d