Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 14:24

General

  • Target

    aed7d0181eb8b95d32332e6915c5ca28_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    aed7d0181eb8b95d32332e6915c5ca28

  • SHA1

    d93fa755a23133d82860329153bbabe21a39c94c

  • SHA256

    41ee2876a97786af9f1f206fb6e28f07d27913b9093c5839aec2c74ff0adfef5

  • SHA512

    6be8b72508cfe1bd5dd513c2cf25e4b777816fbaba812ad15f312dcf221934ec05cb95d04b2a3f91d1b0fcadb4e4e2f9d700cb1d187141af75b635e8371fe65e

  • SSDEEP

    768:DgGzpD7pOotENLwWUY7RCugLez5CKRrCtwTuUapKwe+9+poDvZnGp1gowSM:8GF3piqBqz5dTtaolIvZnwiowSM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aed7d0181eb8b95d32332e6915c5ca28_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    879c959663d494efa93168c725443e0c

    SHA1

    83ef38138f0a35db1ce57c0b45588c263778589b

    SHA256

    61d0c3a6de210462d47e6ab94e69a65bec780124fa0d0f594a6a3494583511e0

    SHA512

    31b517a826a1eb13c9cac791f02b4c04612cd3924160c53ba6928514406c6c679fda17e44ef4e7bd660b6e92077836364a0aa17a8c71e0453f19a400e26381e2