Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 13:35

General

  • Target

    2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf

  • Size

    69KB

  • MD5

    2f5e5a5ccd3f1529c19b64b3e41f3695

  • SHA1

    6fdbd3d2af146616abbe9bbcba28c24ed065f90f

  • SHA256

    79becdc97fa35aff1e94bdf203893a9c80d868b102f4ea7b4260c1171320ebbc

  • SHA512

    68dc484695471ce2b50a5f122fba78969112c549f97479db04529edd12300b3d03493adc55fe8cff3a2a3a72921aeffb668d7397447ed291bab63a0101f317ab

  • SSDEEP

    1536:EGFmG2y7ZFuCLu51vgICdvjc7Tcxhr7H6+4hLueSwfr:RFmCZFuCTLc/4b6+wueSe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8e476e92b65ef9795b40c5419bcfa50e

          SHA1

          56fb80304709db7140857143729296c283452537

          SHA256

          6b698dbf2b16e54f1dfc2ce6544ff6446baa79f9ffac97fe20fe60876eb7a84f

          SHA512

          a91f59e7c6975f4797fb8f20b7663d85c0fd94f4df4560c0c4beb20093817bc5a2b773c0cf8827c73596b6210b21efd93fb24af6062d86ba1c7e9647c0190fc7