Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 04:50

General

  • Target

    f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    f74d003609ecc9af143d33f6c7cd812e

  • SHA1

    2b3d6f9b135cce09d37256db10dcebd82726337d

  • SHA256

    22839e68796088794cc1f8fe2bfb3d473887ac5098944111a3671c16235eab06

  • SHA512

    e3fa7be99239e03d015f7a39c0d412d930d9f0b1ebd87805e89163d75d2b898af2097e935ed5f70dbafd7bcd9f31df682e539d7df2322c0849e8f5cb2ae1e846

  • SSDEEP

    768:aOalNTLIv8e0jil9dGBJgfD8GKDsG9fDwKXb:fH8eTd0G78GKg60KXb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ea6b8c80de291881e0674e985fe64840

          SHA1

          e2ad7ec7f738717828b7b7e49d2caf839bb1ba4e

          SHA256

          ac326b50fd11ce843ebb3929f5443ef616bce0f5de799f48bde14b2b0f56481d

          SHA512

          8e4af94cdd8595b94ee7c69fcd54e41227c7f4ad5f30763489af445fee085a703af34f7a2fe015e71664fb20f56c5577182fbff54d70d93857d414450acd0b5f