Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 03:23

General

  • Target

    44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf

  • Size

    183KB

  • MD5

    44590c2455863beeffc332ab24d1771f

  • SHA1

    0a82722ccb0c9ba5c3794e22a39ada8424bb630e

  • SHA256

    1ae6397d8e7f731fb0b506aeac9a8432b7216d6f615672f6de07052329eaf488

  • SHA512

    7d2f196e79255ae2569fddd7a01073f74fbde175b02276773ecbd58bb00bba3a9b416270a1417c0bc765a494290a77e7c45cf34055a18ef64db76c31e61745a6

  • SSDEEP

    3072:e2irbxzGAFYDMxud7fKg3dXVmbOn5uA6KjnBSF94s0p3jQlx+H01SQ:e2MKlWQ7Sg3d4bO9B1cQW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ea6d284e22f64d8e75184e80cf2977f3

    SHA1

    9343ad305eedf496d71924f2e7781861abdbadc7

    SHA256

    cd90fbf1a981c49e7030f84c32225e6e10f93c81a827b15d49bda0b13886d78c

    SHA512

    41b8c52de80e72afd7e735f4f67430467d67e975f7f5b6e5dbce6602f775fc151af586cc8bb9b55e39dac7ed7fc32c10c4dfb5e58222ce3bae2dded3bb0babb2