Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 19:55

General

  • Target

    5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    5137bd032ac5761e93b9637ea7cdcd63

  • SHA1

    cd0d6c91384b9e83c38c39ea9ef180d0c4a41e28

  • SHA256

    8ca9ea931d0f3171fc7e0979d16d93eaea4b3aecdeeff5ffc6ab0655f90b19e5

  • SHA512

    4915d5a477fa7d5ef7e25a88c3dec7a3335963a324c012880f17fa34f7671969afef718db5d6cb42d1b965f1d7e5a1d767592ee5e0732a04bd5ebf0e5b28e033

  • SSDEEP

    1536:eGFmtzurfYpl1MvQJKzzFpC8GWHKE8O2yzWjk0HkE:HFmtzurf6aCgZOEaymv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5df59744bb7e91e1a5cbdc8ffa2030f4

          SHA1

          4f27c81cc90fe1e846cd1594370307b721930664

          SHA256

          562b21643cc0f5893d30d32fd458a9dfc3445531f2b5a572718351ac8341ecb9

          SHA512

          dc352df3c5503e503f61e5c09da59a528cf57662ddf71014cebdbd739d7d780dc7c82b1e913a01c0e939557c898fdd0b995aa2ba1ab2455e830f051cdaa5db8b