Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 03:16

General

  • Target

    893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf

  • Size

    53KB

  • MD5

    893807ec153f7c12a6aa707c9abbc3da

  • SHA1

    224aeaa9ad93c3f13cb3223a985181b7165d1321

  • SHA256

    8a144d96e3094708e6cae82ef6f6116c017327019906edd985975ad1f44efc51

  • SHA512

    358d3d8f61364a11f21f0418acadd6a318279e4b53d10634cd521f3968eeaef2a64cba162712df3c2fb083e9d65972640aa7bc91128b73b54bebee81c95e5fdc

  • SSDEEP

    1536:EeM8vBROXmPkHkue5YLNb4wIcZjpjYATXFZmGWStm:EeHfkgluk9HcZCAzystm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\893807ec153f7c12a6aa707c9abbc3da_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          349e9037a95b665d3080fdb4a42919c5

          SHA1

          d98408e063a17d9a44c0371f241cffb56940aed8

          SHA256

          a79bd98a3838f22130bc5581d7bec64b0200943bb930c499b604754541005779

          SHA512

          67a484f1d2f45e47681edd4c69f12e74ecff714fcfa78d5387bc537d9cff4cc56f6946fe15ae152169549df038148d2d366829dfca3a58384e3d43a57b6cfb32