Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 08:23

General

  • Target

    eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf

  • Size

    529KB

  • MD5

    eaa51832e80feaf412cd40fb2f1e99b7

  • SHA1

    e8624833c4f1ef4c8d4c1d48f4603443a08d661a

  • SHA256

    2abd105163ccf90f1b63f5c389d2b31d0127f813e1dc318ceace3c6dc0f8c2f2

  • SHA512

    854f3fd50a55b73d5f4528c5c42626c352ca688d948cf246ad5970dd3c5be3ffeb3204c7b2e127686cdc6a703145456e3b702b1089e2a53fb606c4c305310b76

  • SSDEEP

    12288:vNxq+FxUq1Q+DaNgjNzyvU0Q+kQ3WfRZePtELiT:vnq+x1Ja8+v2pZ2tX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e955c50655a63b572939c4abf6251a28

          SHA1

          834440bd4db831e431c2ed4f5c28c240db06d111

          SHA256

          2a0b23b64bc174804a3f92c7da73da4edbce36f3fa15640c968b614a9dbdb437

          SHA512

          99694cf4f66d7d3c24607ade74a859865f682a609b6220d67a2e8e27972f112e2bf47b1cf32c80e708dabc28a2c7ba265d731f2e5f1cabfebdc941fcb05ebf1b