Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 09:40

General

  • Target

    0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf

  • Size

    29KB

  • MD5

    0987dae5da9719c401b026cfc3cbb455

  • SHA1

    435e0ca87335e354a34c4d794b891b47e1eda313

  • SHA256

    bd5290cb091e66e2a170b455c19a7e666484f04a21b510d5ea19741c7c4b4d66

  • SHA512

    82bd976aa0e0cb1fe590f14c812621e49348144b881dac07c88a018f4790ebcca749f44dd808b702ed9749de6785a92da270b0f829a99e1108ca7ab4ceee5afe

  • SSDEEP

    384:M0P/QON8MUG6Qgw0JZCTzz02YFnarXWl0FYJYxMVKr2oR1IyR9g8vTUeKqJ7sjZO:tPXuMZmwgCLWarqQYgu05R29U7mHJIrd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          34988ed7b91f4b3c6f470c583f6ff933

          SHA1

          c1766239a3e3229700f40ac82cc0848c8881664e

          SHA256

          00bb41e07fa95a43e6492c12cc746a55f26cbb5dfff5222c2e69e7941a8e8acf

          SHA512

          7d9bb5932ec81635642bf242972233e87bf1888ded80c4c23a131beb950c6808408b872fc0581e48b0a21327d87673790b0a207cfc44066bad8c1ba53bd93767