Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 22:32

General

  • Target

    3cd7178f193a0bcf564bee79630c5de3_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    3cd7178f193a0bcf564bee79630c5de3

  • SHA1

    add200e1d0a08b75c73e4d309ae49d3bf294f0c5

  • SHA256

    71723de05165ef52151beb385f67b7399827246d2ad1f8be7676c4652561431b

  • SHA512

    ec145dcc2a6907b5d4820bbac9fd20655467f5a14c11e58f9b5b655afac355b30fc16ab2117194c8f1c6c997035baaa2ad4dacdd1ac411ae6a210f94013a9113

  • SSDEEP

    1536:KGFNpTD6rndYYfifJQBjwZUlyq6XeNwd5GgfUrz/vO9ggBVqGADI:zFNpKTdYYf6Jw+UlWXdfSzHOugB5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cd7178f193a0bcf564bee79630c5de3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2993e4b2d7f9ce02cab2dbc1d1f9de20

          SHA1

          6e14e2e2bc7611cada569ff9ed676e220661ac1d

          SHA256

          44c2768f4bc8af16653d8cb6397558bc42c4ff05501a54dcae0e9c5d5817fcf0

          SHA512

          e2e78b1d8af8ab3d84298c9b343f90e965ed683c67db7b26e1900aa85d085b3008441ccefe0eba81bfb216318335d26c43665fdd1dabfcdb5e29ff04961a0ce9