Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 09:03

General

  • Target

    40f30ada7c3a7ab630a20a71f7b9d399_JaffaCakes118.pdf

  • Size

    65KB

  • MD5

    40f30ada7c3a7ab630a20a71f7b9d399

  • SHA1

    0e3aa0b54cb140524422bed1ab84fe3e4eb2db9c

  • SHA256

    5dfabe851ec3314d705e844d83d845baea10139b3ac443685b8ca97246d19ba3

  • SHA512

    3e04ff242a4951da656ff8490a4ca153349b1062c041de6ed21c401c574b09dde0dc4ab4423c9643deab801abee137e19b2c39df9e90a7297e8b8a80d2d925af

  • SSDEEP

    1536:aFgkYjenjiIpa9umk4Gqs8dKD+uXAYQ5ortXVBWzTV/FlMlY9IOhA9wBRNXyhPtR:U7Yje29HkBqNK+gjQ5ortlUXZ/YhKUiG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40f30ada7c3a7ab630a20a71f7b9d399_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          71bb72e29509fcf30879f3f1e692517e

          SHA1

          3fbc32e63d3a4f10c8d203ea2ca060d66e292a8b

          SHA256

          a3429346141c5a16d9a260e64a2797c68fd8e94d3bdc28f3a7bea732ab3bdeb2

          SHA512

          b7acfd194e485f2b97efa962b6b2a677bb84c2ca1d10b39cc56d696353b24349ae1f4a051f227dacfeaaf521dc57c70ab9624a0a2e07341148964173208797e3