Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 10:46

General

  • Target

    eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    eae2dceebce5aa59a13d4ab5c107f2aa

  • SHA1

    e0aa2051475ea51148d5db70c480622076867d14

  • SHA256

    c011356b3418f91b00cb7b2a37e6aad7d237012c087722c06b8bccd5cc39d986

  • SHA512

    acec0536cee66ac2d5102aca362415adb0b2f6187c63223ac9b8737a7c60f590fdb4c3e190fdb12c71dd329566cc121cccdcd3e472282306606edd873dffd479

  • SSDEEP

    768:0DjG4NxNpTj6yAuaaXzqZCB9RnY3/ZVINNk7TNrUGcvJECQ+42ola:0m2pPMuaaeZCB9O3JTNrU1Bgsoc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4ca25032dd19601811a03f1c4ffe3cb4

    SHA1

    b3fbc982034eee81293a1b51f353882d01c4e675

    SHA256

    40c756d6a93e4e25af1c5554bfd268b442e72c3d1d10a3981b40cab909c5fa09

    SHA512

    a7bfaf2a043db4657990c196ea9b2ad6780d10dbf0130f2ad9902a0b653e50182ada84d3260c7e9f3bc90df6dd0cb88eccea50a434ced27325cfe447383bbdf3