Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 04:23

General

  • Target

    fbeb51b596aa12641694881178260536_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    fbeb51b596aa12641694881178260536

  • SHA1

    54756b024c6c39bc064487512474c579481bd19b

  • SHA256

    8cf81d631f25883d5c897df17ef009e4a5f111fb328c72c8a2e5627d6d80436d

  • SHA512

    702eb94cc73a0a7c579bb73147c0f72f78c7c37fd6880d7865b69433a2a73572d84e7c1ed3ffbc17929e548cce915bf1c4170b8f35b2b08a9bb3e1ca8628e3bc

  • SSDEEP

    1536:RVlOhaFctFM7iy3/HPrdydckctr1iShQLrViGSWypOlWWx8Aj0Pt4QQu0Soqid:qBLkPkdOtrEShQPVZlD8a0PtJQu0SK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbeb51b596aa12641694881178260536_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b998431a16b34e5e7ef75af840a0fd81

          SHA1

          b481d9c7e793465691d54a21b9a69a389882a064

          SHA256

          2e1c41d4aa4a4d3b27301db13778666ffeb08261f0b30a93b86b2f015dc03141

          SHA512

          2fe08b2311353ac9dda26d223991ef5685df250a65426ad6f32c7b483020690e0d5960bf3ce721842ae6620f6ee3775665d6497f507fdab72e952acedb901d52