Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 04:19

General

  • Target

    249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    249b70cd6ff4a6794b5f0f8a2a603076

  • SHA1

    d165f9436ca863c3e62ad50dd3a22702755d6e9c

  • SHA256

    970db861d2df60cf8027d05c0890846a47f36b8b7499f8bfb492d054b0f032db

  • SHA512

    c5530931504bee393050d0b4de338f160606966cd9c7c9a38769dbf036f10131671776f1603f580715de34e3b19ea87747d9b3d9ef3de47ed8471da4981a7366

  • SSDEEP

    768:egGzpDXhzFxixtqXBFL8yxKqVMm1Su0IY0oi+/EAYPhtSA:bGFbhzFMx4X5KqKm1Su1YrNEAQtSA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\249b70cd6ff4a6794b5f0f8a2a603076_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          172387def2926672481e57a6b384edd6

          SHA1

          76a1f18c2798731fe2671f974f3207153a8afd09

          SHA256

          267505e35cbe91614ae489739b9aaa283728faa8c1bed42567bfbeb9d9fde92d

          SHA512

          aef810fb1cc85fc46dffb8874267be705bb16f5df9e28cba1afc438dea1eb1e47a114ca925ecdb047efd477a601bedc8ea136d8884e643acdf322368aef23087