Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 09:48

General

  • Target

    eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf

  • Size

    96KB

  • MD5

    eac9dc7a9af6f6afab9f1b6a130cd35c

  • SHA1

    df54a2bd978a8279c097676e44442948287c2fe2

  • SHA256

    0e582514f40bdf80b1f6ec2debac965b4aac8c74ce8f54c4582311ea475245c1

  • SHA512

    258f6923f03ab04ade143f91c4947932f0621ba436aaead6adc0dd3ff5accff0e936979c43ca2e5ba363e9c4013ab372587fde023901f824ca446a7b77e1b5c5

  • SSDEEP

    3072:YmRoZ7waTjbaf72khjevwx/IEiaLpx0y9fQMEUr:JoZcqaf7veoxAG3mMv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b8fe5b6660704d96e84cac1a92238290

    SHA1

    913622a1a73d31cbebae62cc22fbf2c1b8548e28

    SHA256

    5ca34064cd3a410cca6e5186f8974f1ec967bd484a04e82d78231ba5963c79c7

    SHA512

    48e2ce4fa6f8fdca61ffd5c90255f894e424cb1f0217c765d66112edbb9172dab7a836f57831c5fdf728ee4d6521a43d96560dc053a8c6b4ff96add85f44bf9a