Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 09:33

General

  • Target

    8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    8a0de1f2696ba2ece3df1b0660fd67b8

  • SHA1

    9977a1eaed7629e57225f208789e63b091a48ffa

  • SHA256

    8689b42311e44f78d1dcb7b3fc31d62833b252412cc673baf433b4be732225b2

  • SHA512

    8671cf5b7a16bb5684f5c38366948dda1662699efd054eb69bce9e2b1c483c3eabd9e3c37c6a8cf9ddb1d53c15610d634b0282a45fa6075acf49522336c42392

  • SSDEEP

    768:IgGzpDrpa/ILwyH0VR/KnNTNKdphENSEXSewmZH/FvbFtTFa3ktu:FGF3paPphEN1ieRZH/9FtTFa3ktu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    54bc5633825b27ddc4dc114afa7921c1

    SHA1

    eb7e5d22769af66b635e8ae4afeeea3c891b795a

    SHA256

    ec43fe8e68e9b4a26dcafea171142fbb19f578df2f578ba6315a053e7a7b393f

    SHA512

    79c55b4ad0d77a8a2048f10df3935f9f5e7692d33e3e78afa97858bf0fbc55d0b46068621da5db031c9188a2f168ea8987b21e7adf56a71317e86bbe83033299