Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 13:49

General

  • Target

    fce6fc903ba2c02c94e7ac2fbf7cad3e_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    fce6fc903ba2c02c94e7ac2fbf7cad3e

  • SHA1

    6ecbf1f4ad842199ac72c1cf6798a6cb5f90297c

  • SHA256

    b2e3d5052d893cecd9a592d93480e5a76c679de08ba5942d31587f4e9e58c999

  • SHA512

    af0a6d167ba336de3a76e579ee35a339d8af91b623d6f1cd9ea9e63c1e37d450532f7f6621fb0732f3cd34dc599f650fc4f25ee30b70ba61da1479cfcfb70377

  • SSDEEP

    768:7gGzpDQf50vqtSHk6vgSqbg5arWw0krSkFFgSGe+bIim:EGFEaCtSH3YPB30oNie+bIim

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fce6fc903ba2c02c94e7ac2fbf7cad3e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9885b867d2d85fb8a407db1deb01c6d0

          SHA1

          6d125707b0d77e4b336d28a0ce0370295f90847d

          SHA256

          eebd346491c7793a85c22cebcafaea4e2d81693dd1fc42e54d0c68e6b4e436e8

          SHA512

          369511cc74f6bb84c64261563f1081cf6df8d33ec77a6593f45a9de5450883753cb66a700f8940f792e684f90415b376ac35fd80a6b6c82a302f18570bff762c