Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 16:39

General

  • Target

    f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f3e24950bb285129ab35cb8da247e873

  • SHA1

    1eb162eb905a748ba67433ce86b2b1ba5b2bd00f

  • SHA256

    791577e7f0ab610dee8469f708647654d02cc45aae87547bc403bb557dbbac97

  • SHA512

    abdc5f0496245802116081aa850d89d223ca6a2f30db2163d5b623bffdacfd6b8e5550ab3cb67c91053f5efbd2ea0ca1453d591f4eb6ee6fb0cb230fff0ef36b

  • SSDEEP

    1536:lEnB9XRUo3ruOT+MLbzdySVNPSQxHGzkWGqBLmLqp0YhaCWapOtQykdcVYw1AQ:g+oVT+MLVySPPLxmuqBy40Y8ftQryV55

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4baec44176ddcd02e42138c2e9fa26a1

          SHA1

          f1e79ce0355b35fcbf920a8aae52e09f853ee399

          SHA256

          70a60ca005867cfa9ce6752a2810ad754fae2eb5c8871080f27f6bdfa575c991

          SHA512

          d4c932336e507e555262d963344ba5661debce9e7e1d3d21c19bda83d91b56fb1c7dfef4de7088a37c749571b783a830e4fd72e467676366a1d0c98a6fee7730