Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 02:22

General

  • Target

    ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf

  • Size

    186KB

  • MD5

    ac94c7febc7203719be77af1df271d46

  • SHA1

    5faa4b9132ad07c075a855671f06c0a2c51da627

  • SHA256

    4013e7e6094a2aae8ebf6fd5020173941c731ac554d88d19a9fdc4d2dcf8685b

  • SHA512

    349ba71561751bc550d622f1f727ec71e30cd3e1282959b2b24aa8ff620df8816b08ad7a24bd4e149cf150cf0ebc0e327202fce750af48a20834f662e503c268

  • SSDEEP

    3072:t2irbxzGAFYDMxud7fKg3dXVmbOn5uG6KjnnQwirEmOps/Lp2SE:t2MKlWQ7Sg3d4bOHQw8u1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6eb5359d048ce2d4ba2dbc3bab75349b

          SHA1

          d6651df5aaa23e9ab92e8b24d3e38f9bebd289a5

          SHA256

          40a0065ffc451904861451151279d1d54787c4de8ca1906fbc81e2eb428f0ae7

          SHA512

          c775b6c95371a1f1c51ae0b691c42660b902ee3628219f9d4576d4c2f6f334083312aba4b375d641268fe725561c27ef67b94cfb53ddd053f00d6104a437a960