Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 04:56

General

  • Target

    7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    7f8ddfad1e353b671c88527a5e5aee56

  • SHA1

    931e79852c18b0d94c9023f8ba7290797853baa0

  • SHA256

    ce48d44dff76c7927fabbc4f245cb212c4e9bdc477ca8cad61dbc4b6d9264138

  • SHA512

    6b27c2b7d4efeb1baaf57f8f868f7f1a35fe663a1be5225565d513ffe3178bb0fd865033b59e4467bad13312acfeb5972f4c844efc783471734ab78d11445baa

  • SSDEEP

    768:7bL32XbGQ3zP7f2yxW25aUNCpc2mdz2d1kaVbV2ii1DEPJmVTGSmVuADQRaqF92i:7bj2yM7XEUNw+2d1ksbV2ii1gP8VTGSB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    99e2e9672deac894ab32768e4643aab1

    SHA1

    29b7a76ab2578797ec3324567ef24a27b5de419a

    SHA256

    18607d15b856cfc96c30e02f8c8456bfc24aca40c7da681e25afe81ee5bf9bf4

    SHA512

    85a313e056742a67a11b87bc6dab7feb08ddfc7138541eb707922edf093bf5a53af5c9edda6a8e17b87ab056a7a73c86987c6ae2193ac25695a262f8bdb1c6a1