Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 07:09

General

  • Target

    74b22355f67b47e4e72fdab60ba05f20_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    74b22355f67b47e4e72fdab60ba05f20

  • SHA1

    29951b332b918104423ec5dfa2443a628745e6fa

  • SHA256

    8ac906bee3be7dafa4d968b8ec2f8a9ef41e47e13b515cd8511d9c08a0d87fab

  • SHA512

    f807a81ac564734fd1c7959dad586aaa5154aa8a2c7aeff15170a09ae1570cfd338c998b7b87d67cb755a4db1887aad1bd023495bab88a28a50e0dcd17aa3310

  • SSDEEP

    768:TgGzpDTpqGV1AfsdvcXvd9oZOep5rcu53I/3BHmPvCTYcYxHmYa9c:sGFfpV5eBHmPvCMBxHmYaW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74b22355f67b47e4e72fdab60ba05f20_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0ff827176c76aa04e6e96cb3d9d07489

          SHA1

          a89d7c64be1b338a7299b66bfe771bafe5fd2cd6

          SHA256

          22359fd79255baf03358aa7bb7f8cb5bd4ade009c3ab06951d115ec94f56c3ca

          SHA512

          3f3e014710a409468a888d3b500eeafaa7b059be5fa185b1eb2a5361fc7073522e56f6b081c55844292273d490b174565523a03c89587b76b9969bb244ba0552