Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 11:20

General

  • Target

    f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    f0ef7a80f216afb7779085be037bead8

  • SHA1

    e7da258ea74f88561110678d52195c81c3970c78

  • SHA256

    e473cc897387c23e58abb4a0e40725a873e56db782bb5bb359cf53d2e4724795

  • SHA512

    d49146c6ef88c131ff8ac4faafbaa061bb4ab1e189c5d76306ba61c6ba753197052ef57cafd8013a80a4f312726ab89538e3d5edb3842c9c52678f39f6802aa4

  • SSDEEP

    768:LTJGHkzXXa11H4DMnK46DZphQG+Qps0/NlGNGeZ1iAVFD0+VQvQW70e7sB4Ts:gHoq/Hg9DZTHpsSN5AVFgI/4I4A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          efe588c9487aa96d2c7ef7de95bef1a5

          SHA1

          785d5de3ebe726403c61ab1fdb1d39e86e3524da

          SHA256

          619a213026f195131f6e2b7f32d8fd0746ca8847884f36a54e4f976baaf3bb65

          SHA512

          e975ea6803bad5e3106a87cf104fdff0b8a19449e139cfd95b9e6962065cab9317ec958e6c2221edd36e99176286152504377ec6401421839be27874032855ea