Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 03:25

General

  • Target

    fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    fe50df11c89de7261e3af34728e49c89

  • SHA1

    c8b5c7e7069decd4fb89d8eca40c615167e744c3

  • SHA256

    b63535e0c2b58ef2ba9b68852873fc63cb561af7cc24c39d7ca3d4309c92aed4

  • SHA512

    f0a8cf31513df7d9305977c81dbc932065448c443a5a2161fb48185243175c33d5a5d7e2d11d8ddda25c5ec332513b3eaa51fbcd1f949c04da1b33b5c6230bea

  • SSDEEP

    768:xVxOfHE1T8ZqJGyVjKNPmo/7ZyvWjJux5rbT4FnhgRvQiX:kiTURkHYJyNnqhgRIiX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7e47cc387fa2c32c172c0337732d4ccd

          SHA1

          ca58e7d4a0fcfe0ccd83764b697ddbf8390466bd

          SHA256

          d46a8dba86839d7c6bf0ac69e6ce01e80460c19a09d3e0c26b70fb261d8cf4fb

          SHA512

          79d316fdfea51baada3ea1cde3b49ae698067740ff1c580483e1211b09052909ad013ff5439ee411cdf259b344a6b11fe683d9da53813b9f6b5cc07fe8431ee6