Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 13:47

General

  • Target

    f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    f5ea9c891c7bcfb59ecc9de260138407

  • SHA1

    f708eb5104e3e16b6536d067feaafac37f37ec88

  • SHA256

    9a7e9e8a4094ff5a7b78f65c26d0bd27d8c2c71be5f61c2be712d053b78ee12d

  • SHA512

    9b640882ebc12469c2dffb75a6190241392b14f2633d35013a1da91117e392dbddd660fc270207bbe592b463e4b2b65f36c0c1b264c57f2f50d74d7a2fe5b1d7

  • SSDEEP

    1536:78zH4BT8g4fzDHfd6IiSf4RPvxZumbikr5PWtgosiBajbG0XWWApO6ZNG:y4TSfgIPkZZpik99JiYjtXd62

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          07c3d8ec11e7ad6f961b57b455d6b430

          SHA1

          4036971b59a1abecb58e1744460dfe9bcc57e159

          SHA256

          8b9b1f7475b9d0940508b20619185cbe0e48fa827e4de62b178b10f3c4a427d8

          SHA512

          72e8ab4caf5ca956247654d20cca7fec87499e3b016e5a904d3cbe6dfcecbf0546d4f70fe1a6b9dc8bf3d94fc08258d128ab9fef80fc2d9acb54c27d764f6c6e