Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 16:39

General

  • Target

    e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    e7ec3abaffc6321a1f869ac5f9745ad1

  • SHA1

    2fa5ef8f505e8bc9b2f8243f192fe91ddf94fa76

  • SHA256

    4b0787d2427383bc87b6a3840c415e05626af0e85fb5042182e95c4347e164ff

  • SHA512

    c743a68410419363d87c35a67f3a237c5b0316a09b8690a1b075157b941e0b3e0b9f45d890cc742f2c9e8c59f823d4b101fbf79e141b694c284b5ec960c40b83

  • SSDEEP

    1536:1b0Q5Pg6JpUw2RkDBOWU+hK2GGqU0r1goUe7Wpba+hyxhnucc0iEWUpO7+/c:ZRZ/Uw289HhK2QjvCUxJ39iH7b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7bf8c2c63baedf39c913850f251eb582

    SHA1

    f932bf1ade797e4871f746bdd0114e4bab776763

    SHA256

    81eb10591b5a9ddbde262df62ca9739c0e013d75af6a289c7725694602e31232

    SHA512

    c5f125c32c31a001a22e85a65f26339c67ef283e6bc76df15cd42d80a8f7251ec3fdbfe9652c7b5a6ac9924c2021cf3861ff9279f1e74185bdc55e1b38102169