Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 12:20

General

  • Target

    e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    e77282aae56e810c599a34ed6b37b53a

  • SHA1

    b9399cd0eb2ead9070572071c347f1b75f914bfe

  • SHA256

    43b58e61d6f0c57b22f4f3a7f17edb9306ceec3385a81d0fc36c4a6bd28ac745

  • SHA512

    983d4fa8b580daef9c11930416bad2a3b39a17f4de8d8b5da35cc9c0cf845369eec57b58ac0d44024bc189e634f571f2f7a2b5801827cdf87e70a7dac8cbe814

  • SSDEEP

    768:NgGzpDTOExuz1MGbKs1utg6g6k0+2ylue9+dypdXPOcz7z03fDjjs1Y:uGF/OEA21cfpdX2Eok1Y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1532

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aa2860f86f7532257a42ba5b63c24408

          SHA1

          23776aa00e83c3a6a9e246bf9c3496866ccc3d27

          SHA256

          a91b74749e4e72be844651332ecab512340bffd698fa913b124fb3d80e64c56b

          SHA512

          6eb2ea5065e6ff506b6e6c0b3e265563e3090ba98fadd3be0ef239f19261e5ec3e06dc205e68939f89d5883123980ba10fb28ad2c67fa4b002ae47d76c7714a7