Overview

overview

3

Static

static

3

09665abb01...18.pdf

windows7-x64

1

09665abb01...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    09665abb015e30fe7c9d24a632626db1_JaffaCakes118.pdf

  • Size

    97KB

  • MD5

    09665abb015e30fe7c9d24a632626db1

  • SHA1

    4d72e7b3bf86c66eb8b10e62a26851535911b2d7

  • SHA256

    65a547d083b3f83d66992c7a68b6e3f09761081982ff971a7f76b1e4938b3771

  • SHA512

    e951a6aea9b78c2a5b93c3724f1d0302cca7b5aad06d3fa6e7343c8d41efb820984d983523232b961285372302cf5cf0143aecd392adff42204671ff0b826abc

  • SSDEEP

    1536:K2U3JwM3a1iF1UFaBRx+Si8FB6AiE84PzyDuQFWM+5s9rrrulWGpOGwWz:WZwMKQ+aBRxDFBdiEMzMs9ru6Gj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09665abb015e30fe7c9d24a632626db1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7512713a81765f9a103a35724a245d4b

    SHA1

    efb89772a6f34a74b6beb45fe7455b7fc11c9681

    SHA256

    16282bd51966e0c2018c0263e068454e6a6616422d3fb0aa9c1c61fd49625677

    SHA512

    7704fc1b15ca2816fc8407b949acf8564d76af9568107dc207d530c8b3690612bc00c3c32f248d2270d15878ad9f83b95ddcc89df72b82801e8fd976df8990c2

    Download Submit