Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-04-2024 02:28

General

  • Target

    e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    e90124a294631cf4a260dadf1ebcdb6d

  • SHA1

    7664b94f42d5c32d56533581b06b76603e0473fe

  • SHA256

    8cecf8c6d24238b6721110416b896c1ba292af0afe889623b5b643ce2477b1f1

  • SHA512

    17f9194bc8f5cd0741cd4547b3b2e62cc74baba03f7005d9bdbddb71e826026a2fbb1dd4f6e3fe0396934f347a41128c70311e478b968f0fe65449ae9dfa5444

  • SSDEEP

    1536:iz7lO/LaFr1whEeySwYQxL65VpQi/9VMOSsx8iWkNpOPaWcJhiC0fUR74FqMWrZ:oxYOd1Sw3k1Zxx8HPeTi5fURcAM2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ebc92fd486b2908dd61457f2ceb97b91

    SHA1

    fbaa8f9b5d91e92d1fa6ca816454bac8b488a326

    SHA256

    174d47d4fa5f2ab4d37c0a5e4a0cf2ef59ead0fc13b2895d442373ba5ca667ff

    SHA512

    5d0dfadd51426dff9d2ad21f9de2e64ae2ceb055dee7691a3e500ce61a2eccbd74b5f1e922d8aee53a9ce621589b0f35762d3807b868ca9a54448c83cfbfaf34