Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 06:06

General

  • Target

    fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    fe9d0ac722d2094bd22606b5e9eb6621

  • SHA1

    d3d3b9848d6830fe63ef6db1aa2e7ad12b9beed6

  • SHA256

    9f0ccaedf539f2b44c400d26bfd0e93d2ffd7c2f51482b062dacc9b561c75bdc

  • SHA512

    d68f42dd9defb0998987d164723d347b8259795c24b86f5d137297fb2d7236b0e2dc50d37172ef683131969aadb1b9ef106d19dfb2cf78e8da80814b09fbad32

  • SSDEEP

    768:pM0Lk5Vjy7g9iMy6m9/5+pujVzZBsJg1om8h6WYP9plEH+k+:C0gRJw5AsDuuonh6xrk+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          951a4b70292782e0107ed142c9ad823c

          SHA1

          f69492155a61b9bc6ba20d8748d759466f9ff0aa

          SHA256

          d68c490a83132e10a9519665bbe92c7390fedc179c98c04441712918633f58a5

          SHA512

          6c7f0f254052037576b803e922e5100847714f87cf6f03129ea7f916bbfbd73f6ad5a65feaeef9bc97d1b3ba69d7e46184a57445b2c78ec6380f8af3973d8e94