Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 11:38

General

  • Target

    8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf

  • Size

    18KB

  • MD5

    8a5aca9f367b5b661f03f20b1e3634dd

  • SHA1

    ff11c797981509caa059b4ab17b46c1d095084c5

  • SHA256

    55299b01c1d25c3f9bd8eeb5c2feae48d3e4fcd4b86adb1fbca4aea200899ee4

  • SHA512

    e8ef64d3480edc56a9361e996caef446a1d2eb0fc7b3e65638e096b3033af5c30821e8e083056f9c62601628e06704919bff5e095f5969ff8ca18e448cefb3af

  • SSDEEP

    384:VzrdG0Hz1T1G6o0Ta6MKeSyoD6iQAKUu6ju2+rovlddK+uUYCBchIb+fmY+ByHIh:VzrdvHz1TY6oGsLdNN17yuPrAd/736mV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bb83e35e05170fe287efba983a329fe4

          SHA1

          95da91e5ee4345f62a0cf576b332f2e0a0e6cde6

          SHA256

          87f052375c00f43f459edd4f43cdfee55f776840733fe3ebf10c2c162e45d4d2

          SHA512

          6abfebaa496f15c710f771b4880344c278736fd37146fee4bda4b238103219719ba3c923071f4b21fdb0426b52ed54e2ac168e84b01d4e98f196e89d7430e5fd