Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 10:50

General

  • Target

    e9d263c32e8b8e5a79c1703344f445b2_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    e9d263c32e8b8e5a79c1703344f445b2

  • SHA1

    ee5fb94ea5de0af2f0f50b82e4a699e9453bf111

  • SHA256

    bff425cd96e99f0ca65617029cbe039e1baf6cadb7deca537502e6f69a0abab5

  • SHA512

    0a307ebb7f06fc494e4f49db850f1b905c5978c7bb5ac32b5de6763689d56f4d73b831bc066a3beb2f23a9d5899a9cebeb8cbefe0702814695532e7db93b97b1

  • SSDEEP

    1536:pCZwcv0OlwA2Nbqz6bdHVefM9Fa68Y4OoA3XJdoWO6DeY/RhTfmWQpOCrZgm0co7:Kwc8OlFIbqWZwM9J8YhXmcTfZCtbCD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9d263c32e8b8e5a79c1703344f445b2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5359dd1860045077b88dbebe52ce4972

          SHA1

          2c5bbb618674e2888082f4958feb262289a881fb

          SHA256

          e7ebe8cf24e0fbb658eb162f9d05b190ff4d0946c654d81f257b76a00d06f11c

          SHA512

          36d33c72574f02ffe23b03ac484a51b071664d1adb857128b8638662bc60d0ec7b48208f55d55fccdbbb87b49c403db0e7e7444c565ab9ca9ea7582be2812ca2