Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 19:33

General

  • Target

    7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    7e224d9d5d1781e26735ed4124a2435f

  • SHA1

    610604d93e8a7b28b4dcdd5d7a6fca058cc1b65f

  • SHA256

    dd6499d6a4cdebdeac97ce7ed978f4bc643c2ed8ef1a29fa7cd033128628c2a8

  • SHA512

    adfc23a2b8749a42d80148b61a760fa88cd3e88633653dea503d4a9ada53133c5997c9e084a38c30f176033d9c81b0ed4cb80b65d222bdd731b3359168b0790f

  • SSDEEP

    768:hgGzpDC5LulQ5G5iH2wV8GS8dTHmwMnR+k/aRHku8cmE6ktxxPGucQosGwWI6ZqJ:SGFwTGwaZ/YEu8c8ExxP5yfI0qNK+c2H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e224d9d5d1781e26735ed4124a2435f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          68998cb3b46a0cbcbc286d406b0ba0fb

          SHA1

          ecf9ceb347c1a237de5f1b54cff588aa6c805cbd

          SHA256

          fed462d5e2022cac3a3652349e153fe8b10cc02e231ca852b90a2dfe71d709f2

          SHA512

          7e8f6b86114a97f3edfc91b343267181704f67a61100b7c5d1d23a38f10b88827fdfb48a611f7346544a44731937b79e3c6dc90033825e015f39ad7bb4fc4681