Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 06:02 UTC

General

  • Target

    7488bb48230079a3f4351c38e1864d1b_JaffaCakes118.pdf

  • Size

    53KB

  • MD5

    7488bb48230079a3f4351c38e1864d1b

  • SHA1

    08a62364932b32222591f9c3b661dc3cd16dd674

  • SHA256

    e7fd7db8fa654691d5994443e90e4dc87c80bc3e1cacc459e4de350e14a9771a

  • SHA512

    a46103a616488543aaf5265ff9660379193b136dc3d4108e81d655eedf24ad85325c90ef4fb9af8e5245ce56cbf352b27486dc8952e44f204ecbc9444ec240d5

  • SSDEEP

    1536:EKYteMWGOQd3tyJ3cXap3QYWBGh9Hkhy63x21i9qKBqVqxh7oAgkz4BHUXFZmGW3:EKhMWG3dmcX1BQS8QYuB4Ur0NuEHCyss

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7488bb48230079a3f4351c38e1864d1b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4bfcf6def4fe451165e2e7f4bf1bce08

    SHA1

    bfa1fb87395b56ed4d3ceb26bfbc13405a433630

    SHA256

    b0fcb0dc909d8683297a72386ce393001e3194ab35d703e91acababeb8a3e2f5

    SHA512

    fa3c102ce4a46fd7738ee20182b193ac2f983f8d83e3d7d0e7d2000192031b1ce1361d559f0208cbebb4c89acd3d146a83b5483a87a076e96579199496931050

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.