Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 11:45

General

  • Target

    032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf

  • Size

    184KB

  • MD5

    032d4ea58be13fe8584f8fec2ca7e246

  • SHA1

    712a459730a13ec25b826333d349004b29e8a4a0

  • SHA256

    fe6d637528dfd7a1decfe10446db2e2e930f228c3821e3940d59fa726fc46a07

  • SHA512

    637493d0cda1ff47ceb865d34a75c712289d50a0f60d49b495a1700953a7714f741b561fbdf856c62afd8cf5db5cdfe7e996299ff8b51132f36592cbff3fd99b

  • SSDEEP

    3072:O2irbxzGAFYDMxud7fKg3dXVmbOn5u86KjnnQGdptMo6eA9poGpGYSF:O2MKlWQ7Sg3d4bOBQGe8d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2fe0d76a4d3a2a4d838edc999d156374

          SHA1

          6ffc192b6a1eea09380888631777a8bb702c2a0a

          SHA256

          213bc3ee05ba9116d984714a81b0d0ce6f61ebb757be2e9c19586c1159f593b8

          SHA512

          a8bc5f9662b9fd031921c9454d31ccb375b2c619982a8b2b6695624a1d132a39e6d1d985134a51d0393be978f2595ab13b4fd916a011f7bed19a8e1730d159c2