Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 14:37

General

  • Target

    8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    8ac47530e2f0d5f9f689f8584c0343c7

  • SHA1

    bbec7a5d6bcb8206228b50989498d16223aed0e7

  • SHA256

    ba8a8d410f82e455130dd26e7efd8eb24ebc63c632d36dcdd884a3628c0ebdd9

  • SHA512

    29b5cc344271b562499491d1d444109b2ed4b4e8f94c5d093e7750e5273b20ebc262497819310a4e4bb498d59231ab663de5631d359f90c5c36eb5a5c8562681

  • SSDEEP

    768:kgGzpD+p5drZN5r1t6GiTgBNHrO2D3+NW0/y47OL3/6vep78embQYI8P8Kk5T/m2:RGFKpHt6GTHrL7+Nh/3iL3Ge+2YrP8K4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a30755ef75302511f419b07fbc403ec1

    SHA1

    4099308c5bd401a438bcf85f2258e910cd3369d5

    SHA256

    7f4d2ae162b96b28b1b67a3c244f3d43bf306f40ccc1f528f26653dcc953b1d8

    SHA512

    b8d076392b822836d7db91a3ec97267283d83ef0b60baa567f39cf31002aefe9829c5b225e0c3baee726650b5991eda9eed0fd503c8d5eb5fbc5647e23d8bb25