Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 09:50

General

  • Target

    158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    158daf3122fa3ce24d3b08b8d57ddc5d

  • SHA1

    38cdf4098d711554d5bef22aefef4cb68aa42471

  • SHA256

    a36d7e6a18aef5373f6ced4926aeda0216efdd3d8c3fe81145d7e609f549e104

  • SHA512

    644252ec48f7236bde6470f7b3d6a91e5b86e80c9766f609c80d10a66655b9af1366874b2bafff64fbee98f0d9071dfe7bf2936e9b61aae9f4bcd88d7a2162a8

  • SSDEEP

    192:HP5ufk7ZXeHw+LK55OppggrUErddOvIR1dUAks7vYQKyZqtoVJ2Y9:HP5ufkpeHpG5QEIUodOgTdUARsXtoL2m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d2941351627f0022095e8a6a16008e12

    SHA1

    52c6cb7039bc785d6fb159b96deb18bd5f4521d5

    SHA256

    4be8aa6e43c9161b098b7b6f1dec74a4e3cf9b1c558ecadb4c58257610b610c3

    SHA512

    492f9226fd2fc2c3572b7cec0de1e319dc865bec35d66c3458f93c929d5158cdee6a4c59324b74310babc5efcda54780c6f3890c0b91aa7042cfbcbb25b834cc

  • memory/2332-0-0x00000000030C0000-0x0000000003136000-memory.dmp

    Filesize

    472KB