Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 11:26

General

  • Target

    39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf

  • Size

    185KB

  • MD5

    39db05b10316a6ac64115a6564ed9d8f

  • SHA1

    7a90b0b6c08742f905bdf64644f85da5a3128832

  • SHA256

    f05d2a10aa0761bd926afd01239c4dd2ed2025e36c086780886e7a28c4767125

  • SHA512

    0e46ea8d96352576dea93f53f6305674d5c27f16f7550bde4ef75f1c5dc5209869f88828a1f5b4a47ff82a707b77f906ccca6f7cbbae2aaba50187f36b000e8e

  • SSDEEP

    3072:X2irbxzGAFYDMxud7fKg3dXVmbOn5uK6KjnnQlFoO9XXAI2IYD5hKSfoXS9:X2MKlWQ7Sg3d4bO3Q4AAI2dlV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d9d225a9b066e733283d313588076fab

    SHA1

    1060c8c17477c801c25dd7814318a83b962d3f6d

    SHA256

    56aad930e1840e285787f0d55efcf86c9929795182b8e55eb2e2e2f7505ad90c

    SHA512

    d6170d8aa05d04eef75cd099efc276b49768f98157063971d55f5df59f04e14fef1a0c7d054f51b2b96fb074907ae1c094bafa2a52633102cfcc181a51bea7ab