Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 02:14

General

  • Target

    ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf

  • Size

    125KB

  • MD5

    ac8e90770868aabcd8737ed318a0f399

  • SHA1

    3d6315260650029dd271101a1ced56a9655dd6f0

  • SHA256

    b95ee8c1b8e55ff199c695569716a70d4c511171e0875e13ebc2520a1cb9e78a

  • SHA512

    eee10215695764ad1d04836b97cc5227f391ca59d78418adb468295a6b20225b72fd32c164f12281d149748769a974b4c02afd78adbae7f3a2697bc8d9cc53a5

  • SSDEEP

    3072:GaOdQuFofnaN9PHx9Iq6KMAf1PyLalA+/tyOhjI2Nysqq:mquFofna7x6JX5AQONIpq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac8e90770868aabcd8737ed318a0f399_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e4106489fb6bdb1c0496bac018615c7c

          SHA1

          f58b80fa4c70143e396ae7453c27cd7305191d22

          SHA256

          81c16024044cf7dfe717f1271d11dc129631a6bdf58aae5a67e0d10f25247122

          SHA512

          27d689e2b898d656e64c71150e157254c0bb40790109cd9b8dd6890979ca6f886db28b680740810e855a2eab2c7aebfc83fbc22ea0be9db58025f8a4a7217f1f