Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 19:31

General

  • Target

    7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    7e202e5bbff93f77431074396467a7fb

  • SHA1

    e9cf4212dd57d612999d59e50e302862ad1ee180

  • SHA256

    4f2e5afb4a39ed9df5a9858e454dd296d72db875d09a7f783893f0ad847bc280

  • SHA512

    10e65266ec479c65bbaa02bfceb97a58cad05b64f90e28b51a0c738d5d0b601cec4b5439e71e0f582c93e1b08120f637cb220ff3ad4e19a0e9d7cb6f2233f56d

  • SSDEEP

    768:/vMtlusG2rrDWyTMwkeli1GSSWL70xE5tXuMZmwgCLWar7Q:/kluD2rrDWuMwkeli1Ks70SXFZmGWS7Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8d3d7b70e22ed8c2285c151f621cf541

    SHA1

    5e19ec66cfe9d3892fc446518635f23a147263cb

    SHA256

    d1fb6066379b2b62646e4291d652a724cfeb47fd4e0746200fe442af4f051a69

    SHA512

    b2535e7214c0ecfbfe5c107616bf06c6913b3fba46ffa1d0d54f8b657379f23253e141ed25cfa63ab91de33ac8053b89d2398353a37bf40df4238230de4484d2