Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 01:44

General

  • Target

    7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf

  • Size

    162KB

  • MD5

    7079f8527c8064bfff3a67fb45fcd8ad

  • SHA1

    2840b21544de8d70091adb726aab953dd4662a72

  • SHA256

    e8c465665dd753f46356ce679b492f4a15087ea0818670ddb5e637e2c9e3b3ac

  • SHA512

    e0dcd38c74044b1b5dfb7891e39126cc4c0fa102cfb5de6969dd1f231167a3a9581b8ca50f3a8d9334c42a77e32c6914ee73495849dd0adcaffcd575f6cbe22e

  • SSDEEP

    3072:QF3HL1kIsLGq6CzMrvmwD/hsuL6avzdGxVglTKcoyeTyBoiTSed2V:I3L1kpG7UsD5WavwxGBKRyeTypn8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    79c8d68e98ecc9ad329f566a7e2103ae

    SHA1

    14e6f645fa9545a0e1fbc4eecabb0367df771495

    SHA256

    4677055c4bb21b70e9ee02e2099eca583ba4adf9144274cf09854a6629d2d32b

    SHA512

    2bc038ee1b5fccf0d7f52d8dafdd40c1057c12f47b727045726c1bd546efe280d459309a5694b82931bbbefc6d09cb9a458f980af71b015f5d488ed63a7b1785