Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 16:01

General

  • Target

    e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    e7d9b45d7c9069366bbbdc6b23a62975

  • SHA1

    745b97bd0ea848880660a34559296cccd91ed64a

  • SHA256

    843514c2d83ad322838aa9277fd64cdc65ce82cda16527da46cdabacd2e9c031

  • SHA512

    3e10e3c0043400ff75474ffaa8acc3bba82ea0493223b24b565b6c8349095147035249d28950bb8ed6503b9db990a73d1daab9482d58e166dde5d3dae7cb8aaf

  • SSDEEP

    1536:IAkNjCvO19QF3Fks4erIvuhKadutFfHWkNpOPaWaoJYrvmm/H4liygV:kf19qas8Whr0tFAPooJSvmmf4w5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          feaa78a8df86d8c61a3d1217a2572e9e

          SHA1

          8750714a60e31dcc5231fd755ecc900a46af6278

          SHA256

          47a727c9fd26d28c0b92211cfb9258396de07e69c532e96eba3526dd059d3026

          SHA512

          c1661712b4ef55d97dbbcbc6be37f3cc701f3382deb85f11ddb5ecfd58060ec951530854fcf5188be9e14415daf7e5614fa0d717b122a29f776fa1a5f98453ab