Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 00:01

General

  • Target

    6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf

  • Size

    56KB

  • MD5

    6547217c5e6e049452164023d6be4a36

  • SHA1

    c312af426c36d17cb26688c3af6c0d63f1fe1eec

  • SHA256

    6c5632c50d262e7614286e36e7aa21479229fe947c4861b1bd69321428facf32

  • SHA512

    6ed8f68f3c1137601f559f155b8f3eb53463c5de14d267aad1c1aed81a233051590466b996ea91a2ec50b4d4c25965ed4adca222978bcbcc3d72b282e9aa3669

  • SSDEEP

    1536:kGFSp4HEDoSkYgHXZsluWGMACTfKfd51IWHgFixUoWEghUi:xFSp40opb3iub1PNxUXX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9bfd1cde56814ba74474174a0a977e69

          SHA1

          f5aee2abaf47b27d218c10eaefa484ef1027e18c

          SHA256

          897a7d7d201325e5fc6d47dbf6b2aa0bae772109a027aa65cb6433c8e6ac71ba

          SHA512

          633cb20448bf7288a16652f9fcbf72471e35cded96a12b3857790effe2c199932b06167df8ab5b6f8537fa16cba414d3849de0fe3a3e81134d708a5e4dcc5391