Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 08:11

General

  • Target

    40cd2b57de692e4985e59f69dfe0df8f_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    40cd2b57de692e4985e59f69dfe0df8f

  • SHA1

    71abd25bb0c4bb9f4007cc3c193326bb29324175

  • SHA256

    27cd9ef70858b8d7b5c13634dcc48859c39391188893acd7476354d291d619b0

  • SHA512

    3996d812cc2746d9262becf522394060e0f0e2e6765ba1eed87fcb7e9453b7249b514a5c5835885ba9b0e289d9c0211db57f8eb5fc795df6a6f82c8467397ea2

  • SSDEEP

    192:4Ey3sSTqEDgFqG0uRJb/CKqKd2QgfhyDhcYtqoMnxiYt829TbgYWKSU7k5TstY3U:fy1Q5J/jqlQgfAilo+wfYawKti

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40cd2b57de692e4985e59f69dfe0df8f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4ccd91ef091980dd7010b1e47414e144

          SHA1

          ed5a39a11ceb1c564af2fc856d2b4aabb93027d7

          SHA256

          9ff5f6f1090fba6c28d948958155b098ab28296e9986052f09337a00bffd8b20

          SHA512

          536415f7a77adf6f51a6341a40a2a1aff11f00892350a874cbde3acd1636a46071f8e964ce2e294625fb76a9d4ac4bc4742b1ca3128d9300ce019aa3b05e3c5e