Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 08:33

General

  • Target

    a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf

  • Size

    186KB

  • MD5

    a00c33d73a4941e6eeaef135d3e296ca

  • SHA1

    e770e54fa3cefcec4cb734fd36a1b673af70633d

  • SHA256

    0f305b2d243b1a33afbab18dbf279c5ff8a4a63a6e87f55293deab241fb93726

  • SHA512

    3a5b95e5de7d9534597ba2d4ba190048df63ffa64b82173901331c78b757114d3cae6fba89a7ea0f26af5416c1b4cefc187b542b09aa45d68928ffb11c878a56

  • SSDEEP

    3072:/2irbxzGAFYDMxud7fKg3dXVmbOn5u06Kjn699VV8PP0DHQrdAue/MMS/:/2MKlWQ7Sg3d4bOJq4Vqs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          914f1b9b0147a09b8d9e152dbfc77fd7

          SHA1

          11c4c28fdfb5b34787c974a23f0e2d7be9fbbaa0

          SHA256

          d8066c3450ad55a3b7663ced3f4774b62a524b24ee3a729ede991ba29a6788da

          SHA512

          fbccf16508872c48a7468e1e597d3cc3a8270f29aaa3f2746a3fe7d844d6276778791932002e1522767627d797ccf4b9e274a9f600ba5d24f84d559d421ab375