Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 13:25

General

  • Target

    eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    eb2ae6a5fd1f1ee306e04aafd7136f7e

  • SHA1

    d3d97bfe0ff2fdf94b9e2ab3979bc5a8af4fffe9

  • SHA256

    609db1cb80ddeb3c317c7ed199af5795ff909f6da7983b49b1ea31390168bdcd

  • SHA512

    10de751e9967e0f82f4d35c1d60a9de2a06bd0ba18222d804776124718fc527a1ce3054a2b8881e1ba6429548e07dc318239e1c089257835b65a98b599573bef

  • SSDEEP

    1536:Jc3N4fFAF1N10mtt71kdJmKnvyFkD2eC5V8W0eZCCW6u81IP6WUpO71WN8FMjE:W3fTfHt0JmMvAkD2LOf81IPV7NH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          06b3fc9627594e0c5d5f94ccbc3f5794

          SHA1

          0a6a815136d5841bd34742dd3b90c2f401c17f23

          SHA256

          56c62a216b9947f79c2eebd79cd41c7ed52fd16b56b45d581e31ab50db70c40f

          SHA512

          3b9ce64ffae4cbbc95b9bbeb751de4cac9aa9ed17410ed54d85f8984b97482c9eeb8f8dec7097c0bac088539a7d7c9065eef6a4321ffd7cbec250036ebae68e5