Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 06:51

General

  • Target

    4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    4d3923c20a295c9923c9897ba8b1bae1

  • SHA1

    783c09d43ac9904156decc5a0a2e237e63c20222

  • SHA256

    11e1a860a88836e98bba278d167d467052c58f18395bceb1facb2bd88fd843f3

  • SHA512

    4e19812001e162cff2cfae33f65aa73ca28c4dd8950f4b6d75e0e9de453047de40e97fd0df095d56356b8d9b57fddd28540587bf3630f98de411fc7847a5871f

  • SSDEEP

    1536:Km9oRidZBqZH1u0Y3s/ZMejUFhtOiVX4W8CxwWbsRpTgt88C74SWcpOm4q2:798ZxBZMlFhxIW8+sRat8741mC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5ac29946549251154e9c4184a12ccf78

          SHA1

          ec1f18748c47355dd5797a5cb5afaa485b21505f

          SHA256

          b5a077e1e312c5ce4ba5dab518b02ee9e842646124a704620e33c9559d987d09

          SHA512

          2bfecfe626c78f0a9a43db486b9dbc5eda7e5bf0da2805bcabbaa4d42cf7b4cfb3811b2a806f645a79a11ebf2509137dcb4f7434ef9a6b9da386edda2a0630f5