Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 12:16

General

  • Target

    3f74dc5407ad7ecdf36bb3987989d582_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    3f74dc5407ad7ecdf36bb3987989d582

  • SHA1

    d6f2527f8db4c0414fb2ed633f5211ff4e006abc

  • SHA256

    51166d97e50292dcb815508c881d0a18f50be50b6495d5329d219076f015f4fb

  • SHA512

    01c9d1c6d62aabb90f285ba728eefe5d325257ace89c2dc3247cee1e759b674d2e457b863bbdd6d01738f069f89b1230c615e4a091cbee345443f3dfb2efa2b4

  • SSDEEP

    768:JIwYOXovk1CtyOTMSspj2mhx/nbcOEnHnIL9Gjo8EkcZPINotvSxkmj0r4AanRTb:JRhXovJtyOQSspj2cx/nbcOEnHnIL9Gj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f74dc5407ad7ecdf36bb3987989d582_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          82fde31ecd7162f181ce3476601466fd

          SHA1

          94f6585c4d9be8eeabe7d211d3e0e2ceab5e9284

          SHA256

          72c1a44ac660c9f54fdd0c4140f2a718572739d4fd0a7fe318ca3577639ec54c

          SHA512

          a51409d8d704d2fd55099e3d6c20b6ed4fcbcda0dd95be67aeff8d52bb5122312b4b0fd689342ff9fc1c602c7abe2ff610301387b592293bc9f9faaf95f70609