Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 19:31

General

  • Target

    1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    1740b78fefb02c033ae0fda052001116

  • SHA1

    d9620c18c0baa40a8655f4ca374c45f85d71f932

  • SHA256

    36692665fa81197a7121821e8df96194b3dc4b4d251429c70169b536fe37c53e

  • SHA512

    2d3830f19f3172514d6e0641bf33b458b6e77e02b43f03d71f9dc45651bfe98c9f67abb5f22910a919ef3d288e2e884769700743d1e8393cf69e291573bc8127

  • SSDEEP

    1536:cHBCOUSLIy8C23d2s84pVptaRnYZK5MlWspORGWnMX7uO/ek14128W:FOUqIy87dkStaqZlsRW6Fk14k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1ca3177d53cd1de61f3fd66d2e7bb4aa

          SHA1

          bf37f1a80e11b9bdac01e9d5aef9b9a6778bfbdd

          SHA256

          0ee5f38f7ee11e8482358cf18a7d5f49383b966284088945bd40995ca3b6f3b0

          SHA512

          ef4f719714e01ae7716c1f5dc9050cc3ad766855152a1668188ad283152835c5b7d54b7c98f617c2f352e112d3c5395d3a692b79ec29d6f4fc039b1c3fcec794