Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 10:19

General

  • Target

    66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    66ecfd35ed5c96b9f01859406d888288

  • SHA1

    49c3f879ea1c99cbe31203e2f312f74ee32244dc

  • SHA256

    23aa251443026e1ae4c0e48808b93c2cb1e9be35ea731a333a9bb159d3c3ea62

  • SHA512

    3a75ead1e74d0c07178d32171a48c6ab69ba802240de1ba17ac8bf6a139a89364087a8b907984aeaa49eb0481f4bf7c8ecf654985ceee6a2f2283428ee5123e5

  • SSDEEP

    768:CJiQGzPXour39Xevh/6Cd8RDcX9CxcxqzJHV6NV+f2764:MJGzPXR3ovhiCCRIAxcxqzL6Tm2764

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          933a3c531b1e21e7fe8aa5a51c2f5213

          SHA1

          559dc5ebe8b7d5d0d29441e8a1660e0a0e0792a4

          SHA256

          a7d808b7f6e1fd08bd6e5c5cee32a32ef20f35e75b614da4e4cd0ae6309e8477

          SHA512

          2a41f1723f6e2f7fb3a4dd28a5e379dbc55f0a69b262787cc45c24b9c7cbffcdf29c8594898ccf54dc2d7cda0da7246b4b6140027f2e07e02563b9fee3209cb8