Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 10:52

General

  • Target

    413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf

  • Size

    64KB

  • MD5

    413a9c555b815c3e2eb6f1dec3c52146

  • SHA1

    2c9715a11a6a56ae9f72cdeff91df378690a5ce5

  • SHA256

    c99066bbb2d8a5a066c750edb2e3142096db2c67950cb940f1e3d17238cdb9c0

  • SHA512

    049168c8b8de198d97e36dbb937162b5192f02b8fd0ebb7d3d2daa08dae3bcabe7e5a0be263f5ce77ed5d07f9ce60f5ceec6693a010bef16f8be462951e58c57

  • SSDEEP

    1536:hGFciFVnN8dQFjabE5KB4zMQnGALlfhwUXw46:EFcehF2bcm44QnGAXwf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1524

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ee193422568c21d2c59fa13c1a06ed36

          SHA1

          ca5347201140316ba12e8fd60b638862abf058d4

          SHA256

          494489dbe350a24da15d4ddc505f93728a00b84a581d21fed3484438ffa29d2f

          SHA512

          0cc2c57278516b3034b698bfae88387439fbc030190620949652b8d4fa9c9f6c55f263887c43083cb028de3258ef0100896b2d143420b3e3740b5e5b50a6e61d