Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 18:02

General

  • Target

    ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    ebac44334052fac9f12863d50da370a4

  • SHA1

    6b51d95c3c9b92664df5b888fcdf724bf796053d

  • SHA256

    53fdf1933406b2461804be46328aea9d319e5a35ae38090b750df403968a0960

  • SHA512

    01a22b4115c5c553c3757183db1134e8c56d7a139f3a4d16424c59b3bce07120621a70a97e54a9fde452e3d2720968f9f682539b3e48b13a74d4789334a7197e

  • SSDEEP

    1536:Hf3XxeKiLausjPbcWm1WypOlWWxuH9ffwHHASq:/3UFbWjcWm+lDuH9XCH6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8895cac95b58aaf1c69523622137f2d8

          SHA1

          293c11e42f51ad5d60fd54b0080a255fc5deca51

          SHA256

          5e61dbcc21505e7d83b5edd3c3653bfc09fc186c3cc5f8a05872ea2ecd1e8bf4

          SHA512

          4b16605327489dc842fb7380c4ee2313055c001c324af1568c9de65e0af64b9978b5033a3b08c2dc7e2bb14748ff506f9d9b8fb92e179028cb026047d08686ae