Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 08:06

General

  • Target

    44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    44fb9ba220a76d62a54dfd27ebadbeae

  • SHA1

    11462bf1e9fbdcba0482983a95c3e998d8b790a2

  • SHA256

    c96e85e5560a6267d68bd1305e73a01ca35e359a875580828f5d6e87aa54cadf

  • SHA512

    c6fff9d96529319e1734eac374a47dc9274816646f59582da0c91e46952983e1ca463e2b8de558b6aebef0027bf9b8bbdb852d058cc551838169bbdf30c987fc

  • SSDEEP

    768:blmAXJIsE7xXv8tcFuFzo0JxmQYIKvN9XebWuy:pmIIsNI0JxlVKl9ubWuy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    06ef7ae077f7f54b78dd9d1765960cab

    SHA1

    2048e62062de573e0231d427aa2366fc484338dc

    SHA256

    8796fe204b3b8fcef480b16f0884680af1069c50406c8c126ae50cf40d70ea71

    SHA512

    1cd73980e4549ba5b2b80a3328893107763c6ac2a262e3c71fadc3e03618a296c7a2df0f095cff3d2573f7b69870dd35bb93e89fdcd2c75e0728ac930df6ac46