Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 09:28

General

  • Target

    83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    83ba067ec0a110be39741973cd245cb0

  • SHA1

    176eeb7ea26e4fd6d500481bf0fce21a98b04b4c

  • SHA256

    5cb1d8f4b83b644ee9e7e568b1f3c0c3703cd607e7ffb21dd7b559135a76b7b4

  • SHA512

    3ce3e75b234c96ac655f49aee7d840dd96451afd6845ca31b89ecd82df73dadbda69f59a124ac9a7dae2959446cd4884253da1884f4b65c673267ab4a6bd1afa

  • SSDEEP

    768:6gGzpDEp1mCyK4LKm8u2zf62S93aUJSLo8l2jK0VaYpwAFDcb9vHV1LKELECJ2HY:nGFIpo3XJ03l2mqaYpI9vHDLbLECgHPw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\83ba067ec0a110be39741973cd245cb0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d2237e6ab896b438c70ae6058dac9d52

          SHA1

          0ae68d4bf5d04096664df793f2b4bf09789f53b1

          SHA256

          b8e27006136b9e020b72cff0c31edd42f0bc90bbfb46454fa2f7582972f5fe98

          SHA512

          17a5c232ac940d6402b85fd963313a71ac1ef2fc420de1e5cd61eab3d6ceb30869b8d9506bb709f7e3212838a5c793069a36d87c189420c06aab8e14ec5169eb