Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 14:56

General

  • Target

    3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    3ab17a0f87ade766400944d75fdc50a6

  • SHA1

    b0fd3c7d39ca16f6ea039980cbf9050e7795bfcf

  • SHA256

    7aa37f42e232a01636e07f7b43016d22b417817fbe723127c600108d1fd8589b

  • SHA512

    4c850abb5c3edc678018cf2a64a37fb1575e9fba6d829f9d750b00cb6406f5a87ad1767aad7b436803eb39baf9ea99daa619bedfa27a4c655c20e45f18893122

  • SSDEEP

    768:agGzpDU+k4FgLuaKwjVEL91Qd7H9GwCpDTr2qXTIccGk1nXe3Pm3j:HGFQ+Y7HoZDTr2qXDcGwXWm3j

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d28226aba13b09ae537c3e1f655e4b3f

          SHA1

          8f085f560dc256734ce7ede47efe7a879843f35e

          SHA256

          19431983445cd50ad6f1f8a0ba4ece466bf6219852fcb70980f1151347d45895

          SHA512

          e42019864ab075c974f6d7ac14a7e822a1d2227ddb17ff0fbb542f2a94cbcc8bb95953e6e9e7945b1a911cca4d2defc2a4dfef4afa0382cd75e8dd03f5f0a156