Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 16:52

General

  • Target

    e7f252d11a9407544980c349615ae5e6_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    e7f252d11a9407544980c349615ae5e6

  • SHA1

    d8795498ec21cc9f658231dee8471e4afcf83acd

  • SHA256

    53f8f5ec7652b62db71d50668bad50ae5d3468870e06f47e1c7068fb62e50af9

  • SHA512

    bdcf7fc5ffde65293a421971cbcd6f6069dfba01a2ac78df40186507965ee4bf8b539e5f6f1bdd2876ab6827b7a15c92c6df26178e12029f6926e867fe849a5a

  • SSDEEP

    1536:xrzuY13jX2z/UK71dykiAETnrwGYzMqlytGW49rfI7h:1Ifjyk5Ei1ytGW49LI7h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7f252d11a9407544980c349615ae5e6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          26f22c70480f70326d785e707a5bb3dc

          SHA1

          de907963b898c2040c91827216305919779472a8

          SHA256

          bc1dea9f048f90f1cbaebc14196b63c9195a3ccdf1d534f7225c262b2eb5e148

          SHA512

          61704b605410680607f088a8f60dd4447768e0681c953829517afd59e0964d8531e63e2128d89f62355c4a2290510b1db010a0ab7f6cf4b021732438582f78f8