Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 07:57 UTC

General

  • Target

    40c2ab9b69a64ed0fcee4dd1fdb5d9e1_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    40c2ab9b69a64ed0fcee4dd1fdb5d9e1

  • SHA1

    276380b6232b5c1cec5379eac2fba2e9568f0bfa

  • SHA256

    285b965e1cf3e21650c4fa5ced64681006530dd2bb7ade9faa0ef178d07988bd

  • SHA512

    d85a18d3fb7e437e6b107bb8f26da73836bb01a384fe3fc5146764d645f91e0fdf7f32d40b0afde8be406a6685b6e262459bd81550a2548641310565ab779896

  • SSDEEP

    768:UgGzpD6pvkyOhtdURPxGgjQj1aYfp09hP808mE7UuMi86TYadP+rCaL7uWWBw:hGFup/PxG3fp09hP80M7f7sG+rC6uWW6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40c2ab9b69a64ed0fcee4dd1fdb5d9e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    661a2d058e4f653964081ea642dc64a6

    SHA1

    faf14159091898821d58f7e6c15d630a0ef7bc95

    SHA256

    ad4a3e83da11857184022df8d8d1662bdc594bb68e7b2c265a817bacd3384935

    SHA512

    15f839f52b9a58db5917826794a2e2b70a4e23653261fbd857209e20b5bc89ee66275ab2633c26f5f5acd5d183867212574b6fe90cdbea9219bcc3d9f85fbeb2

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.