Overview

overview

3

Static

static

3

056d395461...18.pdf

windows7-x64

1

056d395461...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 12:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    056d395461e931c5926e8a051d6b7ca0_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    056d395461e931c5926e8a051d6b7ca0

  • SHA1

    dbce40bcc62a5b7b4212e36e7135e4d66710df9f

  • SHA256

    71ed537af345bc352a2d0546b63627d0ac948f63d7bacd852d8fb363f94ecbbf

  • SHA512

    96ec1f6231d9bab012fc0e39ffb3f51d4c0aac3d2ce25f8dc2da38315ac9ee97ee12608b11ba8b0aca8507d8b1d0ab94baf136ee371f9d5001daae8c2a24e1e8

  • SSDEEP

    1536:FJ3Pq8Tjf4mgjm+tGme7YLUYLndbYkn7rZe+pZyDsvjkh6OK7FnpEREBW0jAddIW:n3Pq8TsljE7YLHLZYkn7Y+csYsh5CRES

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\056d395461e931c5926e8a051d6b7ca0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b192502bff412881804d9e50b91a5fd1

    SHA1

    8a3a10d70899945faa48c35e991dc79b4d473264

    SHA256

    efc402e4009310dda91e9378a6b1ba6885514778286f2c65f9949030d755cb6f

    SHA512

    f7836373d2f55f821162c6282f0b9661647bf39587d7bd5c88589b4042a44e06ecddcd3c7d36e4c0b3cb7b1da66316016531c846787dc10f1a12da5e26c26675

    Download Submit