Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/05/2024, 23:17

General

  • Target

    1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf

  • Size

    56KB

  • MD5

    1ead9e2b57b1e4bacaaffc0a0a5bd34f

  • SHA1

    e546a6b217d0c1d5bdd1c46887d99ee1df107962

  • SHA256

    b57bc5fdc290bf0c4971cab119877a3c5812cf6f6d743f7d781b2abd27f30a0d

  • SHA512

    f32b85b658a007cf3798b9264f8cf59e6c83f7548af065ba00e08d0a96445fc71f8c7dc6ebf6ba0610d6fd899ffcf0e40a3acadfad6195d14d123514035dc249

  • SSDEEP

    1536:XcqXsQjCvsgYsda7lkGGciH0B2NcPE4H2Iu96jK8ekDZoI5Io5v8xrjL70XFZmGF:Xcq8KUldACdVWcKTgQffFN5RNAXL7iyq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          61f958a163b7af689a2517086f686d31

          SHA1

          d97241fcdbbb0a58107616edc1fc29e2360abb29

          SHA256

          d96c7c91f216ec7453ae166554d47c67d5ae705fabc9f84c1e2755f4c210f7a0

          SHA512

          953bb900e3b5793b7ed6bec498f9222640c71565f8fea6cdc2514c45aa046d8099a169fe2098805ec28a1a99863a3df070d65cb45a8953c425146d9978432aaa