Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 05:57

General

  • Target

    1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf

  • Size

    58KB

  • MD5

    1fa97b3fb3849532cdec8518da03bda5

  • SHA1

    381b6c5875fd279acf39d2e793bb3f36f53d0dc0

  • SHA256

    aefecf03e197d1feecff2e11f75385e8272fdd18ec2b10e47fe662ba27bb15fb

  • SHA512

    850c9fac7009d3ddcdf6ab439ea4303f01d30c849782080dc9ac55a3469447adca855b8807e9453c00d748847655606069032325feca22d6068d0268d742814a

  • SSDEEP

    1536:hJGzPXR3YYwe8YT8g97onImXagmDNGYK0Nboejdlyar:fIh3Y68YT8gMpXagmhGYBhoeBlD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f4b436ed98772f4291c94c6e79722fd1

          SHA1

          33ef4019e73ed8a2683bbdefb34934a9cd7cef8f

          SHA256

          04d8a77b2442a814cafb21a93f5d7573b99f5406a4196744b6168a0f95eb3342

          SHA512

          af60c794cb377fe27ca4c21322fdd3cd30ac0d8ad77ab7eb686f4057ce9489cb6559e821feb1cca3762cd7f75c366681138d8471572dba91304032416163c7b8