Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 16:05

General

  • Target

    7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf

  • Size

    55KB

  • MD5

    7d8e26b6838d84fb52e700f4f6c8fa31

  • SHA1

    a5873984f3c12d5e60859bbccfe778c9df830fd4

  • SHA256

    30ee1e1806d92cfa5f85262ee0ac8a0cfa5a531800a1d32c7ac052cca29ce991

  • SHA512

    6a2529f4f8f8a5982055212c07044570a0910c05a2cdf99b5f6792445325b2e313aa0037685f62497ec700b8742a8b97ee37cb1e9847c9b0d33bb04b35724c32

  • SSDEEP

    1536:tGFFpogngsWinHt/rZXg6MgGe+EZKPW3zmWfGQ:wFFp/aSN/0Z3EMPAH9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2832

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e2e72564b8921f6e586883ca71fbba13

          SHA1

          1ba7031d89cf555910e3edd17a761e52e1405c61

          SHA256

          0c2fd015fbfe37874bff49115805bf6da8e1c15a10842829381771bdee915136

          SHA512

          a95640236de17a90f75ad572f73aea8f8aff2487a654064284ff00b56177ecc20e95fd00fb4ffd1e67936d4d36d54a7ffd13848dee558c85c35ed11a2955e880