Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 11:17

General

  • Target

    840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    840a0908d12ca47e6fca29e0b36aacdc

  • SHA1

    444176ed2801bd926546bef6c2ab448a313f6226

  • SHA256

    d6b8206786fd746c8f44257cc9bd1fc7a7041e5a07ee33e6c283143b2d95a6e8

  • SHA512

    c3745dcd3f942ccc6084ffd44f2853f757d8e9653c7f962df88b383c884f60aecd71abe69efa8d65a80d2b503c6c7646c660f92324ee95bcd4e646bf8bd29bb2

  • SSDEEP

    768:MExz6qSUVnGim4unDQzakFm2WEex4iVsWO1+W1Y0BIFRrCualmXvE56XuMZmwgCc:M20UVnGim4unDQzakFmRE+4iVsWO1+Wx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1264

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c4e8d592997f4810b2ba1888177543c6

          SHA1

          579da659e2f58927a611c4611062f2e0a87cfcdf

          SHA256

          8b7874e45736580daae62b3684ea694489a934675c37b57678760f690cabf95a

          SHA512

          9da8667bd64df11d8c3fdc986e4a3fdf5b76f8314993b0ac7a274deb0776142176fc5a54bf7d6ed055335685b516654f0aef2e9f8b0d31b857b5ffaf85d09cf7