Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 16:48

General

  • Target

    ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    ea74545d5301e626a10a2c281e5afcf6

  • SHA1

    65a40b9a9363474640f46dbe7353f5c84ec4d52d

  • SHA256

    ca4f7463eff01e7ae353bd7aa16644884c2ade97bce44da8663dcd3c40b5ab25

  • SHA512

    8bb863b7e3fc68b3527e300b33df1271fa4e50fcb1855ee70441f71d8b261cc36310c49e39716175a2273c88a3df412a65db5dbd3ec9c2b315041e0bcaa52056

  • SSDEEP

    1536:AN9HO4VeyzzY006sWq3TpJdVRUjpJ2jiWHtZhya2CW1QaQLob6cgpBOrWUpO7bVd:yJODezY006ZoVRUpJ2jiWHtZh32spLoI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f9a16c3c027194bdc6752b34379cf557

    SHA1

    c8e45a391c324345b5c15336f11b9a2f31d552a2

    SHA256

    1dff44be2fde5e1ca025248fc140f3feefc27061f23ebac030f80b2fecbd89e4

    SHA512

    a4c07d61dc9bbfa43f35beede0738ea89e29bc8dc0e87f8f86b43f5216f172621ef306d4a4bfa7efabc6f1412d404c347061b7127b460a654c58a880bced64cf