Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 08:45

General

  • Target

    a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf

  • Size

    29KB

  • MD5

    a8cb807da039fdd31d6f60ff857a9843

  • SHA1

    4a266e151463aec6c6ddb0063ccdfcc35ab034dc

  • SHA256

    e3ffdb6e21fa4614fae6f2af3566ab692c8e2eb0d0ddd1a7a79f4693c7fc9ee7

  • SHA512

    decc426016fd47b5c27d6a2a262f412774c70b059164b940500f3090e6833a6c54c737b796e3956fd64ef7d320e8c73d8307ce561bb4d1498ce73f4e2e672a47

  • SSDEEP

    768:+l7tRPNBz2sBFd2I9ZesvJ8vYqTOWyq1shW2D1SaV12MAqABXvE56XuMZmwgCLWv:sv32u2I9ZesvJ8vYqTOWyq1shW2D1Ss9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9cfeceba16fb77c6256f437f2857c469

          SHA1

          27b110f28c967292ab7b991bc1033422bd56f149

          SHA256

          54d2cc5230ead7eba99c8cd965e89cc9def060059e59b509edfdd5dab47c0882

          SHA512

          0b01d10b2ae7c1519729d4dbc2fc95948f38954d3e48079787fc13912951a3a293516442117b06542e028a088bce3d964f8ffba917867b4d8a536d3d057bdb66