Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 12:38

General

  • Target

    f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    f802438cf6743330dd94f42296011ef4

  • SHA1

    85dd79e7c9f56c1455018f4b02d1ec1d726c5823

  • SHA256

    9fc134b74bd7ce8ffd0ea098450e49120f99f516ef96fcdbc7becc3150976c68

  • SHA512

    bb3ecf33a38e48b1eb936b180e0268ad3e4ae876c8f33b6bb43f91512ce48dcdae8162c9567657ae0ae7f9350f17d133697867e21a06ee6b097e02a3caa6336a

  • SSDEEP

    768:K9mLVwbVubjxs8Ul3aLonurmsErcK1WX/SWTLiO:JwbVQBJLKurEcKfGLiO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c48e7a353bffa0bd988d564d2b1df42b

          SHA1

          832db2af078478336c590335e9e7d5dbedd65266

          SHA256

          13c5cba473061c04c7e2bba5251c85c90b2840d7b00071f04e4b5e373c58ec38

          SHA512

          0c282016a17d3f879ca6b47409de70fde77300793926258e6e78a7b6d393a9f7dd5a20d3717f7c99b8e1f4de43b45740726cc7ee35c32a2ddcadc835c8af6104