Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 13:51

General

  • Target

    e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    e2ae30445fa37a5e4defc22b02665aa6

  • SHA1

    d34b21e20675f6f46ed5e85c5af247567fa3ce11

  • SHA256

    220714cd454660b4d297766bed9e1c88b4b10eb9668892d63f2ff25f8ad65f95

  • SHA512

    a67fa30f636c169a2da8fd42e6749d92c4eb9f7e4f69424eda2da60bf1ffdf4c94ba00d88758802d120571c176fd0e39ce1733c6eeca1c080c769fb3aba90bc4

  • SSDEEP

    1536:xqqWidzRLfwGE8Le9QIQ0UZMRc0qa5RYDU0Oox0OwcDmYyWA/5WGpOKCWzTxqYFF:UwdzRLf+8KSIQRqRHqa5qDaobw2mYi/N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a8025b1e640b47667fbbbc2e93002bc9

    SHA1

    ea9eb2f39d33871e8ff12b6b8e15781f96b440ec

    SHA256

    bfd98dcc1c30dbf15defc52cdbfded1d66dd7a7be6a7b3ff8323b51c56619a3e

    SHA512

    201f6d79e9a0f7e34f0b05d45c280251e28a4b1e64e95b00fa0a76604700add8db79f66c1adac5a79e3f7e9d4572f1ddde332017c69471d503409bc0f9cacaa4