Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 19:51

General

  • Target

    7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    7e30b214afa2ae95b6798dee4bb8cda2

  • SHA1

    1a890149fc9cc3c0f35d9c52f33ac59d74fd7845

  • SHA256

    d43f0ed8f8a92c0c1bc6054438feb7049e2429b20e90496f911a76c983a94e4e

  • SHA512

    0803b74f4b9500709cb62e7c088c895b901f0ff1333cebd870d804e212a8fcf44b6e98d2a31d6403911414b459b84b26d8c57e11244b1bf00c0608da2827c1a2

  • SSDEEP

    768:VgGzpDkpIUhXRJ3sPZE08otwN/sVQaQ05iIvm60LwohKt0RETbwCAHbJaiNz2PLn:GGFQpQdQ05hvmnKUEP0ac2PL3YAF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          48de97de93e55ecceb29eda8d9781d92

          SHA1

          c304a7c80a896dc5303bd1a4f85c1fbe3101c418

          SHA256

          f6921a17fa292a5fa9545c85afdb43536f5e07f7d6296208a472e55f9f8597e0

          SHA512

          b9295824713676723c3deddb4bae9e6de353a724b7797df88975be0eb09c2edc0eda31b7943916d3cae3a4246f77a5a1808e8459da41e6c3550b26b86904b5b1