Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 01:17

General

  • Target

    f4bd29e27501ce65077fdd93b1610389_JaffaCakes118.pdf

  • Size

    116KB

  • MD5

    f4bd29e27501ce65077fdd93b1610389

  • SHA1

    450c071d61b3d5e9aa63685131950a9ecaee39d0

  • SHA256

    e86e981b4d45677dd50f930d5e0af9a6105359772dc3a8b8431839cd5dbc645d

  • SHA512

    67f2337f453890232582b28ac7bf38553d5c79e318b0d4efd39b989eec663a0842b1b691a22c45491bc9ee695feea2e6b00668b2463377edb56a261643db29d8

  • SSDEEP

    3072:a7V6b545xQi1WpCwMYZ15YhtgA/BTnbT/vS9XDxG1UqzDkX:a7c54HQrmYn2n5TnXYDxeTvkX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4bd29e27501ce65077fdd93b1610389_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2944

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81b9a4e589a6e90f9825eda8493bc1f6

          SHA1

          5d781cfebc35aad88e9b21e546e584a7c7739ff4

          SHA256

          64948255a6d091c018234232fd89ecb12e6ee301035bda0fbc083cac62d501bc

          SHA512

          daf0ae1417531c9bc58204e2617528f4857ae376c708bef505fa7e31aee833301239737cd0e66cf1260171c65d9738ff6833179b9bca372245e2b97b985eebe6