Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 11:39

General

  • Target

    2eed12136f749267939c43e829a997af_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    2eed12136f749267939c43e829a997af

  • SHA1

    949df1f5e347846c2af4c4912b75f2f7dec73a02

  • SHA256

    a5f2d1ae83284cbd7099bfc46e3aa1385071d58b2a201b3994060f1d6c71718c

  • SHA512

    6942fd56e53a5125d8d008c038014b58a514c9bb67245147844bfd7b070ec02c7ca38ef2dffb07a1f8660ba1825e019f7df2641a19816f8e449795d001694af9

  • SSDEEP

    768:9gGzpDgeInyShWtrAK2oJ9+TMjkqe/Z3/wQep7iFQwhtcWN/z:+GF8e3+Ioqe/ZPwNgFQ8tcaz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2eed12136f749267939c43e829a997af_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cfe2897d5134eab659bc048a30ef3432

    SHA1

    b863c43ee179de8bf405245ce05cf72bea8ec353

    SHA256

    f7562f08306b09b20889225a03f3213c249ed1c1e2d6dca3ccbb76571bb1ff1b

    SHA512

    e71ab794828660710620df5020387e49b5f06564aafe77a6fb5b4c6509f95001283b3604a84a550160357b16942f4211568f7556ef0a65b77cce19184db876e3