Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 11:42

General

  • Target

    e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    e276e2d64f0beced115ef63054251a67

  • SHA1

    38bcca07f4b3fdbf4446c201297893e55249e90b

  • SHA256

    802459c730f316e81184c5f9ae8f1ddc7409ca9d6ceb8f6a5734fe68193c3613

  • SHA512

    b90faec906ed96dae61605c3a9ee6c936ab8e17efe94dc2f56dd2c8d64281ccaa46fcf35c013f5d6a950546ea90f8c87b583c6fcb9a5c2ae04d50c92924dad67

  • SSDEEP

    1536:IUXpjfOMs/pyjW2LDuiBony0BxB5E1B7H65dTXVgWCpOViIWsWT7Y84qt6K8fq:hjZsQy2LyiBoy0PsBb6ZxViR7Yl/KD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2e8b282f38b5d6252044f9e8b30a3238

          SHA1

          bb581cda89ba3e60817805e0eb021dee1e5f8ad7

          SHA256

          cb972b6718d808a3a796c18b4ca89f047844fb2090f942ccd8b28b57e03bffd8

          SHA512

          f8d09d55873a9f7e2aa408570115593c6864b9be2e538a4729676af253f9a47d6e4069a08676d84bfaa86ad98ad33f85b7e038b28114ee7326c28574357abea8