Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 12:02

General

  • Target

    e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    e27fedf30a28cd4f0beaab1536e278ef

  • SHA1

    ea8b9b22d58d7c8f7b4f35e4d2e0f819fc1b4b80

  • SHA256

    0abab654be19c4b433ff16c49043a716c4e0da95998b31fd968b961b27f3141d

  • SHA512

    23b943544321e7e03ce32993790ce0ea6f666b7f22efa2bdbe129e362666c5eee529b5375a4d889c7ed1c379feee322c3eda01e43cb1e2b4e6bbed8f097f891c

  • SSDEEP

    768:HgGzpDpSnOPYmrZsNWpnpfjDXMlx+Dg127UcNKGjaKiOl5PbbVTvycgL4GBZ:AGF9aWpn5o+U127U+KGFis5fNyc8/BZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          11eef1df5377ab3cac01a6ec7146b193

          SHA1

          ef3f7e78df962d4fcb271331cde79db8a5f8abdf

          SHA256

          6901f3895f79d9547774e82e8942a7d82aff5bdd8776703625132898a7869170

          SHA512

          35bf15d359cc9116d628e03f602729b373dc3a7637c6d14a7dfb164910d642de604e7bd80376fdc7083b57f7784c248d26f150cea4c328e049cb4e90b0e63d52