Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 00:50

General

  • Target

    ac4e1c244ff2879e5e16cb2bbddb828d_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    ac4e1c244ff2879e5e16cb2bbddb828d

  • SHA1

    def48706daddc1d80f596f9b45f4b7f1519c68e9

  • SHA256

    d93fffe583cb9356abc7fa7ac8f080bd0031943b878d019091a86b71c8597040

  • SHA512

    7d940c6af95dc85e1c99ab1b5dbb0664a2dbbd5daafe36bea6fce50861f48e59aaa5aa9801132af0b5b026e47dbd9fb091a943d77b2b52ebcfa173bc0ef52ee3

  • SSDEEP

    768:5gGzpDHaJb669qD8zzKBjpM9AHCNxYglsOVzNy/GlQ33GnfgNlMxT:6GFbW/2GAzgyOyHgfgNlMxT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac4e1c244ff2879e5e16cb2bbddb828d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          946c43c153f845832779a1aaae48ed68

          SHA1

          0711c71eb634bf0ec966cdb3d01afbac094c69be

          SHA256

          29ad50465665535a643baa71008c1428046814b8c8dfd218359a4dfaa6697899

          SHA512

          4ed9579bf6b39eb2fdec04c65545ce7d8ac277a63e3fa87c8c3620d58db078ad1372db403f9029cd191c7b369a95c51698dd8f4e40117d7beff842ffd152104e