Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 11:54

General

  • Target

    ff37da1a1079fd889db8f09df288c700_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    ff37da1a1079fd889db8f09df288c700

  • SHA1

    253e992af7eb39e03339ae13ab276f3e67ead068

  • SHA256

    37bc429b98797e51adbb5d455f4dbe452a5d34dfa8e3c506d589d48fa52d256c

  • SHA512

    140bef1f73b441683d05bee763a3ff98bf43b1d1fd27998b3a34c208e83ed1d2bc51790fff3383e1c8f23d45e3fba26d0c30d5d7e59e8378fbc438bcbdf97f6c

  • SSDEEP

    1536:QRBz5DgViQmiilvVgOjaZ6GGtwT1BTr+k0alWYB/dlcF8rEhiW8pO+oyK:YBVCiJp9GOj2GtwT1B3+i9BfcF8rEhNv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff37da1a1079fd889db8f09df288c700_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          25a7e9eabb9839f2e2fb4cd74c7c3ec8

          SHA1

          c6c1f3e0c5afeb9a97a951f812b2de425b338bb6

          SHA256

          32c3de4e984636b9dcb985306358fce0313402d5c01ec9dabe410daf1822a09c

          SHA512

          83c5fe73a6fded923688940c524d212481e7c857af39d2877525fdd8b7addf5583a531c916c2a125c4f2f3c84390051187ce1b93a3ffea38dbb2eeb7fca82a7a