Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
03/05/2024, 00:27
Behavioral task
behavioral1
Sample
0f3f32ed91ffac18827af99740c6e256_JaffaCakes118.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f3f32ed91ffac18827af99740c6e256_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
peepdf.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
peepdf.pdf
Resource
win10v2004-20240419-en
6 signatures
150 seconds
General
- Target peepdf.pdf
- Size 13KB
- Sample240503-arzaqscd87
- SHA256 e9958b248574775e32c8bd6d2a38f1689a1ec9124f1c62e5f887ec3fe93830b5
- MD5 3895e6a72976929f8f5b414ffad6d42f
- SHA1 70f20031a4019bdd97b25290fc3ebc9cb4b7ddc9
- SHA512 9438a216e22007ed487f30533cad5eeddd9c95ace87b2bf7d954f303702fa59fe589d81805d3e041fdeae631f6f84a53a08b21fece8dd992a16a391e5c857fdb
- SSDEEP 192:TkXwcpR3Xx/2TFFjlH11PjAEborQITdzUVZNxE5fylSY8qzV+VQLNxAY6p3C2rTo:K1DXN2T10EboEIs2c0Y82HAYBqk+e
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 797c85c9c325dcb1c0e4023792d595800eeafae01d5d728b6e74844b545cc113
- MD5 ba9a245c4c93b6fba64071f6b0b6c116
- SHA1 b17e1a3a6a12e72f97d06322e26f6e316d849f27
- SHA512 2cde3fd63d7038bbed763e48e052c65e45d3c4cea51e40d180d3021b6daa8ccc1827a801642ea8725a9ddd12361d52547433c8a54bb52e8a7917c379fd1e71ff
- MD5 SHA1 SHA512