Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 02:29

General

  • Target

    2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    2eaf306fd8931968c0774d457bdca605

  • SHA1

    28b7a900ca74cd3d156ff81e304264d8867f8274

  • SHA256

    a0a3921e4f59953ebc43e5ec4e469ada5e864a538ab279c9258ab4ccd78e31cb

  • SHA512

    1b4070133976afad89202ef9721a831eff339c53194ad4c804de349281edff2dc084cd6131db6209db5b664465d9ba29b0fe87256845bd67c547851282ec821c

  • SSDEEP

    1536:sCaQcVBUum40UQUA4cdQE3faXutHqLkDFEpWJ+JjipxuNi6WspORoOo:z7cVr84cdB3SetT42pxuNidRk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          72e6d9f2a2c7d8fdb25bc9615562b21e

          SHA1

          33eba006198249b91b7ad03d5c2b2137c9fd25e5

          SHA256

          8420be1860799999bddf03a2bcd76bb284ee1da51380e43087a0e43ae4eafdfa

          SHA512

          4d57a4fc087db01578e92671e03cc02a86dbb5a1e3d85a54987c871a0fb546e5cdb5389ec145dd47781a7fcb2e6ae104f0234c0caff9f3588b1fd0f59ccf4ff0