Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 20:18

General

  • Target

    14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    14523ff79427a05c5e171d510cd2f117

  • SHA1

    c772c1c228af23b4729aa5703852f15339d9266f

  • SHA256

    571c176c1538995288c8ce3ef8d31613de38916de27a71abf749cea122e72580

  • SHA512

    a8d17960a1b41e8373e537f7dbcfab7f23684e249c4b3081c804d82c456a9c01ac1978991317a3ad33c8a8e46ba14d02952aaa9367449d0a0a6e001c37cb16f8

  • SSDEEP

    768:FgGzpD2AwmS3orZvMVJKTVxSu5jcCQ42KzS31ff+hg4AXXqsWTOx8KM:WGFi8pz7C1eAXGTOxrM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2743ebc9810a6040e88e7456d5664728

          SHA1

          7614bfde52934ff79d121e47f9c0ff5b10abe32e

          SHA256

          4e941d20522cab74b1f2bec6b70edd47912c0ce7f933c864bce0d0764c17c9a7

          SHA512

          d0978d1f5459e6520b65f2d2bd2626dbb0809d02b26e21cf74dcdc71dd328e8ccc61e463d6dddee71cc2b5330043f5db32c60e5e419852d30fbc991ace059a31