Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 08:28

General

  • Target

    40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf

  • Size

    175KB

  • MD5

    40ecd888e0f7f4b7f8a1c37d82c05d6f

  • SHA1

    a3120c5a9df43f8f008b9b94eda61983beb2c396

  • SHA256

    9082562c031b4aa0fd9cd7ce94ccc15c7e35acd49e5a3c48e688cf175eff4a06

  • SHA512

    2021ae60f0b69c25a249dd35c9e27423b26c9c70972873a30a683979997ad6121661515bc18dd18e89f37356cd0a409b2a4d400c2452f362145dcf62fd5f0e61

  • SSDEEP

    3072:Y12BtRwGj2+X0g8WHbXks93F/S0lyrt3gSgHVBb5XENIVwcW7q:E2Btfjgg8w9x9ypgSgHVBWIS9e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          58c8fcea6cd0cf92ccf957739a4a0ef5

          SHA1

          45cc5e9a5f042db8167d35435e5a265113269a4d

          SHA256

          6e58a9dbd20ff0d04d9f49560872fc511ce176cffd44d9a23217460125aa691a

          SHA512

          c6f72e610f6d74c754ca12389d6e2a75e6157b31998b4e45a2823cdb211c544825a00de7a824296a0f85c8deae7e6d96810bd7a652a8a7e18e7b944a901980df