Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 22:25

General

  • Target

    a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a6dee16b44ad062a1b0eec3ce9e6ef46

  • SHA1

    e0d3eecee5fc743dcd24e96a4a0c0dba644f3171

  • SHA256

    e7e9f4c5b350264b116c59dfe0ac471f7f91d104752ad2c934470cb5398e640c

  • SHA512

    ff078eb3126133851d4d8f5a991ff4002ea0eeabb080565f32608d58e25ab1b642da82a93e464772a1a5efbfaac1c5f3c32612606ad388820ca937bcdbd262b5

  • SSDEEP

    768:sgGzpDgOWela7qRKiUmVj1vjLUHEPWNQn5gRYcZ8HQAj:pGFke3+EONSEYcZqQAj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6dee16b44ad062a1b0eec3ce9e6ef46_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    049d96137ca547b7b71325f1039d68ee

    SHA1

    5a52b86b90a8ced9aa66d2de81e5335328f9cfe8

    SHA256

    3e0400bdf9aaa3cbd15d0b4c8df0b62a0437afd23ba7588ecfc9841256ebcf37

    SHA512

    6f8744085c74bcb3e47e98d59a141e0754770c9fa6e682491b3a87370f8d2bb6b49d87b48496bf6c423075fdf3c755c072c9fc1bd3af810a3f03704dbdbfb85e