Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 19:58

General

  • Target

    30ca64ceeee8138c6b7cb49619b59050_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    30ca64ceeee8138c6b7cb49619b59050

  • SHA1

    64772e774b94675f3ed68205f226fd023c82e8e3

  • SHA256

    2160c4edfb36e85d72707c3f832dd4bbf7b614df9fdde32c3cdcdf2ac84a2acd

  • SHA512

    208be76740c3a4ab8ec4add257f6a1e1fd68a83575cb8fa32ae67fb0cc4e4d42dc8eb3eacc5ab8f0a5aa4b7a9cc8a7b7e8853a2f938c14a9d0fc20954f296a3b

  • SSDEEP

    768:EZXuMZmwgCLWarWE5Hpx2eQeVPmtjwiSsqRiT8gshYqAgNyt3op2uo6it8XlLW3k:KXFZmGWSHj2e9VPmtjwiSsqRiT8gshYc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\30ca64ceeee8138c6b7cb49619b59050_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2600

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          93f03cbac3c6cdae9322ec32c0380d89

          SHA1

          b3cec0aa9432c3c566e2a3c4c34f1136f61c7b9a

          SHA256

          50ce6aabce8ef3167587b595676ad2343bafef6bb38d2afee20a4d96eb54cde1

          SHA512

          2788fe7bef4fbffb5008f8d0f98bb3ecea34295e245704c11e2f50d9f69c9e6b9e99b66f012a680117e94d416590e3992155cda1be0c6cb5ee9fb8490e7307e5