Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 21:48

General

  • Target

    e87eb87b3d179045f2c882cb876ae310_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    e87eb87b3d179045f2c882cb876ae310

  • SHA1

    4cb1c794ebd22f6c90d2166b0528420064a5969b

  • SHA256

    5e576188b22452d07002f72d84fb72a947efbc03a571f26277f49fe0665b8a3c

  • SHA512

    01abb6a8bb4cd77df8f421af68adbf52b70f820dd947ccbbd4d0d4f3416f4688626fe99a77cf3081ffe2a1315965736ccfee4637e265037550c9e75483161758

  • SSDEEP

    1536:/rvYVccXrw83J9mOUPJ6+C9P22cR6p+23Vol3X2/BYzC0vEjSywW80QeHNaVtT8Q:TeVJ9mOUQ59Pm6fFo5X2/BYzCKkNaVtz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e87eb87b3d179045f2c882cb876ae310_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81f28c6a257bdcda8740616e7d30d846

          SHA1

          782ec97f64e706d8d6349b48300889974c3ed89a

          SHA256

          ceeb10740cb9e3f01a8375b2b43973c1685d24ccf3731bf22b70489d9d9b9c13

          SHA512

          ea37630d8ff121b6bf3157b2bbd381111c3a98b05d29d64647670956d7e5d9f4a33582514c2f3cc838f7de7e13b60cdf523e89af24c5f6ccc4dc935cd0ceb429