Overview

overview

3

Static

static

3

009a51ca19...18.pdf

windows7-x64

1

009a51ca19...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 07:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    009a51ca1981688d4f08ac8c823816ca_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    009a51ca1981688d4f08ac8c823816ca

  • SHA1

    b128df61224bfd3e9281540752c3487ca9ee5fc4

  • SHA256

    bebbb3f2b936f2d35a91744209d4e73bba9a326994a76214430e1fda8312fb90

  • SHA512

    93cdf62f943a731cbaafcf40023171cf9a4c33a85b9239e6c99b1d1cc05630aeedbdf81a8a01cdc366a8ffdfbb563356eac91c6eea5b6a65f1b8ab55033712ee

  • SSDEEP

    1536:X8kLQVQNS3ryUsvfn184umZdAEoM6YpriS1dmx0kWalTGudldGKPWxApOGp7lybW:s0QKNS7yUs3n18xmZdAgzp1U0GQildTH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\009a51ca1981688d4f08ac8c823816ca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    dc39639634726f8b4c92acb23a32d48f

    SHA1

    cbddb6c9c357b91bb27392745f326061a996d5ac

    SHA256

    a2dae1c902667cf5091f5ab23fb6ada75f2b48b406a5af554deea28eea3f3442

    SHA512

    c3438095ea2cc97597e4e9622567db724c4a5d92ea3f24bbb6f12ceb94f567730e474197af957595496d9d112ea1207583464464161dac92b31a5873ad65b4df

    Download Submit