Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 12:34

General

  • Target

    f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    f381fd9197a36b14db6cda62b69f9309

  • SHA1

    9f64fd7a9ee2d4a999b611668857982ee9fd4ddb

  • SHA256

    02af04148bdd740c8f6a8927ce65918fd00c1bd766f7fdc2427743b8ff840e17

  • SHA512

    6f9403cb64f0ce789dfeb939885bd074d7db4a81429c84cbd9c6fa781330aa972740764aa3b50410545bea5cdd9314a1168b20a1da877c8d414627648ef45667

  • SSDEEP

    1536:anJlMP4/7Tc8pwfZuw+bgyUvFXxQByepy8UJN1SJSJb6mWuTDHjTgKfX4W8pO7JX:D4UrysxhwyOSEcTDHtXj7x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          59a38b7b5827e8f52540b96b36cc44dd

          SHA1

          b78493a09674869d2147d5f371943555de29a796

          SHA256

          5d913a8cb37074e90d1c88942e11969037e9294c92747962e530ea6c5d1bd2df

          SHA512

          2669d1c12701ba25e16fbea25e3f83dc87cc29f070eb56a635c70286cb455c050aa67b9573d19d46ed65e429ea0f2263bb85ab89e0238a1e6e010aeb9882a6fc