Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 20:05

General

  • Target

    8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf

  • Size

    17KB

  • MD5

    8b9de8c97370d76f792589c1de43e3e4

  • SHA1

    eb36dfd7769a25286d7f72707ffd6d20faad598a

  • SHA256

    06b47f75b408c1d5b9a6c0ce741592a04dd279651d65be01785a0e4c04591b61

  • SHA512

    a542a4f03dd13f62b5cf05d9da747c045c90f7568a79892a0ae8346b631be80cf05cbb610e6cb00b4f6e636a4f997917b69a79482cda4eeaeb03f8b8a4ce28a2

  • SSDEEP

    384:VzmB9C3rQ5Ozz1OiunDqJneDa4kBgBh48mLeKuPykqI1401EIdUTucY1iNnQTXsc:Vz09C30az1ZunWJnw1Ocm8mLPu6kqG5p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b9de8c97370d76f792589c1de43e3e4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e9c0f2d1c7a37f1a95f8a4a3c628ef3c

          SHA1

          c77df56d24fdaebf06bff36d6af7c00256ac456c

          SHA256

          914344708affbd43c351b520e4e52f3b2ae0458b9d34809ac92421a2b440bdfe

          SHA512

          0516ddb44d22ac8452c8cfe33c04d6eda7ed97092645c9084043c3e583ec78523c4875c072570ea8dc57f91efed7bca22d067b47c71509aaba5662644e5e80b2