Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 14:24

General

  • Target

    5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    5c50e2997fa53c8d2030b7c7abb773ea

  • SHA1

    317f684b773deecf528843482d00eab62cf62425

  • SHA256

    bfd9c2c087212fd6cf1d14e079f5a75c5b3d099ffd70bfa793e817e00100b6cb

  • SHA512

    4c176049504ee5e07ca5ea4b967930a5751bf200b932f328eff18f8c17c12b3ddac6f817d71249148c494fa210d75257b6a9773672a61905337edad940b3e122

  • SSDEEP

    768:XAH7CTDvWgazqwd8bWlarOlkSvVTDIxo+vfVw1GkkR46ZETR:wH7CTNv6j+SvVDwY1kR4tR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2116

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          573465dfd99d418f48801ca9464c484a

          SHA1

          a4d93518edbbda6a9d17dae394d8482e9fcb173e

          SHA256

          f80dcb33874085a04e791887a7437be0dfe5fc1613780d428b80a53159de8b62

          SHA512

          17646cfbafbbf912aa6883f3dd5db430302ea426d45864742d7a9fb194496bc6daa714ef3142d9bc937258292547b7eea0b2a00c947136670937b594fec6e077