Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 22:35

General

  • Target

    7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    7ea4f7781e7e25677d6c29b2d86e116b

  • SHA1

    1be8b268104019d09e64a8b9d9580765f79b764c

  • SHA256

    6bec229bf501fb7ffb69ba83fc4e1d4c957a471d96ee2f6e22e58ac114a399c2

  • SHA512

    766854ac2f127fafd4919f1b0b98709ccc4344ab80006a61a3ee461480e46ef3fb74f6bafd9a4661d5b170c1f751442993f45cf0389764b4c0c043e0d6b191ae

  • SSDEEP

    768:9DgGzpDZpu8/q4SQH3d7aZDKI/4v27TVG6YlEWyCzbyEkW61lqRCuNi/:WGFdpu3uoTo6YeWpzbyEkDlqRCyi/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d2bc2929286e0519a78f3409ed2a744f

          SHA1

          6503f6d4715ddd20f9711f0b3c08ff71a561664f

          SHA256

          a82f2d3903187c9332e1ed93015491c8ac9bd361ab47265d128751f2617ff655

          SHA512

          b76ccec7c3dc385a0ce2bc37a371058c35afc32611bdeac0656b44a4a8f7dc74a0da1939ecbc3be928075845f440ecb70d34fc4615efbb67b94628915f2329a6