Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 11:51

General

  • Target

    eb014965b7c7ebe5a948f65e98fbbecc_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    eb014965b7c7ebe5a948f65e98fbbecc

  • SHA1

    7adeadea257d38cc5bcfd5354596c49eac2e4146

  • SHA256

    622d44914098042b941244029d3e4a0b3c62ec5305c84413f649e32903e57983

  • SHA512

    7484a28b0e947c2be8738c9187903e51627705bfdc42ebe694c053cc57b000ef4140242171c36f244acae46c03fc26ee254fa42b6f5291d0d4df340483b7a25c

  • SSDEEP

    768:s7XoGPsrv799ivh2a6wENXcalPhCeKRndtOkbbAfSuUny/Pd0CW:sDotvp9OQa4BcwcnxHbbAqub0t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb014965b7c7ebe5a948f65e98fbbecc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ac4d359d6f52648df771f424ec5c8cdb

    SHA1

    21d9f9f875a1007b0fd9d8d3a77ca38e6278cdc5

    SHA256

    58dee593a3be99cf82e5f60b39af2bff185e29f50408e5467da21c949f91fe28

    SHA512

    de7d319c3fa31814ad909f28907b8ca5786ffdb5d6c72598b4f7a20fcb4a7a25738b0ea1907b2ef924aa37df6a1643879b5b02973ba38265e437ad44ec75a381