Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    31-05-2024 19:09

General

  • Target

    8808c5bc54b8ca32eac175604c153aad_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    8808c5bc54b8ca32eac175604c153aad

  • SHA1

    b66dfd82a318695007d865ca40e558fd9d925d48

  • SHA256

    70c5c36dc2eb91a52642b072d8f6166533af0e4a930d5052004c2818c8f403b9

  • SHA512

    37068c4d706b495d192d0594dfbc8374a7ee38c6f58a84bdfd04d44353c9ffdf41da365209c1cf79e869d8ffc48ce348059f33fb47baba0292f4e2c4f9e0d6de

  • SSDEEP

    384:Vz2G+Az13Aqgn0OjyS/oGoiXdtvekuxCu/YPoT+Cx6oSmQ2UqVaO:Vz27Az13AqY0+yS/oGoiXdtve1CiYgTB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8808c5bc54b8ca32eac175604c153aad_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    27b4f12c4aac2a9d5d2cfaced767c085

    SHA1

    88818743e48d7f9c6ef3a328f272d723aa00d4b9

    SHA256

    ce2ab9985577c0af1d1ce829af8f7c7cebdc51f2e8c5a4d462453b34aef143a1

    SHA512

    85cca6263bec4c07b105304c64294d11a13e470055304e59719285a6a6e093e6f3a61246f4f56067f08564ba8e46262d94bf2b418bdf22f5d3319968017a34f2