Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 16:11

General

  • Target

    eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    eb75aec69f4416daf3e5a490813c3809

  • SHA1

    1c99d2f311ed44597d7ed33e1a6c16e5d3e42ed2

  • SHA256

    acd15ad291fbffa50e0cb6a42a08f1a9ef994b36c05f282a7b324bcd416d1506

  • SHA512

    bd8ac81cddcc3ff80b435dc2819bf8861fd3e930161a60701dcc6e8c68801467ece5ca523fc04962b3b9499fc3036709987989ef36648f527d97d32cbc1a63e3

  • SSDEEP

    1536:Wr5C515Y5QWUtCaS2ufcsukiLHbrb9CsZAhb7v4ukuF+feqMbBLPfaSvqn71qTDD:q5YY5QW6C72ufce6nbnZAhbj4ukuF2e1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:844

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3f517cef61ab647f3dfe2fb0a3c0efcb

          SHA1

          1bd0ea403ab185a62be0fde93f2e3aeda4d8de45

          SHA256

          8c66ba94977d8d35b1617d90f89ae5470e6b46eb18ba34e2b967383299548688

          SHA512

          c572aae1a83efa5a2edbf3255831f091b1d87ac3490a3598195511f7a91f4e134947fcbc3efd74020a40a1793b5d13224dc9a2f342b6d9b2180fb9eec7e3b53a