Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 23:27

General

  • Target

    614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf

  • Size

    51KB

  • MD5

    614b6130b60272b07bfbea2f5f9fd162

  • SHA1

    20bf11cb1f7a370f9ad76282968237336c94e27f

  • SHA256

    bea59ba76ab67f5bde36de80d8e787f41c6f465f51c708de50f477e1eedcc98c

  • SHA512

    c7b6d9809aef4c95a42e73b00c26bf498f7b75822f9eaa7daca283a49ead21da287fc2edc35144bbf06956c225538e865ff9e2ce0ae840a13c0ab475a14657ba

  • SSDEEP

    1536:QGFm2w0XenpR7WOr6LTmhab1/2WvPvx7vR2j3kw+L:dFmppAmwTmkb1/3vPvxDzD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ae20e1a4d2a074c1188f37adfe531380

          SHA1

          1dc4d1de6f4da3963b83b0fe550f3256154320b2

          SHA256

          2815df417f9a58708dfdd28d72d2d48c36bb9a069618fba4fd43a921a48dfcc9

          SHA512

          46fef08bbe1ff219c7d01a5026b91d686c6d09e26e6d0b0810ae3f75f4f6f49f7475752493c9c31ed8322439bc85901df503453609d2fe76d9f6013c203f6ec7