Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 18:11

General

  • Target

    95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    95cd7dcaedada33ed4b9389e2021c216

  • SHA1

    58c709ffe09c2cf75dee0ac06c932e68cea7f788

  • SHA256

    53f34b6d57ae5af0e94aa756719ac93b431fe4a80d087bd397bdf4c831acb8eb

  • SHA512

    38ca3437995af8564e007e5e87a07e77237c0fd74bcba890d0cf62fbf72e7a45a401cb79ae71219224d1163db5d0cb29dbf62fe077872f5f71bd74bdc54737eb

  • SSDEEP

    768:MGgGzpDBpLGN6jTXGNhzDWDESTdo4yBUKwg55nvKWfxVWkJteckGWy:iGFFpzved2KPnKW5VW2MRGWy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95cd7dcaedada33ed4b9389e2021c216_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2280

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e0f38a3d7da41411f4de319b8b4a1978

          SHA1

          ccaa5e57a9beaac924cf6d354aa6424e698c37c8

          SHA256

          fce3fed29e7a313d15bc0be8d2a910abd63f9cf37de199f08c43829aef3d653e

          SHA512

          d20d8322a9136e6891522b9f946212efb9909fd8486f22ef2483c8ed0562a6cfc661ee11588cfc347aabd80503756441f1f23f6be08a5a10b09b07d2af92c4e8