Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 02:15

General

  • Target

    90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    90399980096f5e6b6abf4b2e8b1ed593

  • SHA1

    072586d491d58b13e8a9e1d2a908bb3932e22382

  • SHA256

    624b4a92c6995e8237b364c5b72298d74e06146073695dd9801c23c15c8841ec

  • SHA512

    6a1fe6c38e6a6cc66d2b2ef879bfed5710173d602034318ff635719cf10538fabb0e56b7c6249e0d8cad4611aaa57065bd9549fed26ac0323d2dc4786a3d6871

  • SSDEEP

    768:BGcJhslblNxeD77Sv3Bd2wt3jPCHkUy53Nf1F9FKEq+qVhYocglze+/XKn+HXeW6:ccJhsj+7Sv3CwpPCHkUy53Nf1F9FKEq8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\90399980096f5e6b6abf4b2e8b1ed593_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          45937850990f999644411574c248108f

          SHA1

          7189504ad6c159376c87e8d3ca359027fde534d7

          SHA256

          8d408d90e47dfb0bf2cb55557bd957999971062aa4c17adabf19a576f753c3f7

          SHA512

          09ebfa32fdb93ba9b71d5a8130ce72334f7105964a2519b89cada2165af57c6b8aaa7e924b136731d5407142b45e122ef30a7a33475c84b01479aaef96a7c64e