Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 17:34

General

  • Target

    fad20640e5cd08faa6891d3071d5e341_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    fad20640e5cd08faa6891d3071d5e341

  • SHA1

    e01f45ca2feee021fda8b386972514dfc0e8db23

  • SHA256

    ed454645646c8818337783b2a4038313bd3018ce27321bf89a60450b698e6295

  • SHA512

    e18e3ca91dd6bacf99778104d0540afcf359d577602c418bbbde978f173cb23df0062fdb26fb7c848275c06b7f92be77d351c79b05f77f9da126c25cee42108a

  • SSDEEP

    1536:gYapKEcq8Hca9UHIGTd0nyi3E21k4rKjETFZkoqln4DqE0sbTa9WOpOaZEWuDooX:gUEc3ZeTriNO4rK4RZkFF4GEhTa2aZSF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fad20640e5cd08faa6891d3071d5e341_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f1b0f924426f5baea07957c883e90847

          SHA1

          c07ca68fe8074c0e2829b4f09b626275a129793f

          SHA256

          25a47d1ef9ed97602a04dee573a6a34b2f02d4f123b0991cefcf1feee0508e2a

          SHA512

          0112d043f064d729be8cf14e602298a5045935fc21d06b71532fea982de1ae29cd68294a5146fbb3b2833dbc2c3f81ae78692762fbe7c4d7dfae851a6e13df13