Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 16:32

General

  • Target

    9274f364301be3e74955a87006340407_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    9274f364301be3e74955a87006340407

  • SHA1

    affa7640a04e233f73ea328ab3f35d7f46c340ba

  • SHA256

    c00ea9d0dc751870e2f80db124bdc543b8174b9dd8b62859ab9d812cc88f5f7f

  • SHA512

    4e42b20587cc08e1fa75d1d92c6732ceb65f390889bbaf49587f887883a47e7f77e69ed610b3200a4350307c65fe062a023d091de1c39c3f22dde10a3d41cec4

  • SSDEEP

    768:gLjX06mhDiuxG5UZf7hQWky2O1uaVFVOiL1rPVVAGpmNuUDQ73E5rXuMZmwgCLW/:GjtuDuGZf7hQG2O1usFVOiL1rPVVAGpN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9274f364301be3e74955a87006340407_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3cd178caf0bbdd5761b34d1f6dd4f592

          SHA1

          5bb86fb06effd61ebdbab379395b4db074304d8b

          SHA256

          3468c5dfd35643b64dd3b555bebaa3fd2a3f73e4c02c645bd89d336d4f9c247e

          SHA512

          debe631ffe2bfeb69f620a16a037b146cc7351be93def21cc5daf1f505fb93a9366b065b248e621602f35f5a5084ac11febb144756e364a456cc38d8b8d56796