Overview

overview

3

Static

static

3

09114c35b2...18.pdf

windows7-x64

1

09114c35b2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    09114c35b28e96d24e5a7a231dddeca6_JaffaCakes118.pdf

  • Size

    90KB

  • MD5

    09114c35b28e96d24e5a7a231dddeca6

  • SHA1

    b11c657dc11a662652ae99fb71bb1e40fc963c11

  • SHA256

    48f1c8b10ef2af981915080ffd80ba1e3316b6097f6d84b23ec35a3ea1cce411

  • SHA512

    077e4afecf575cac6de90c4b9cf48bfc150406c6c8b9a24bbffba82bb969ec368692d6a62a76a6e5d79ab9ff31a4e1e15fd9935bebb462aeacb30903d8e437d6

  • SSDEEP

    1536:AKeRpWmQo5/duEMb0Zzl/QmG8BdRPW9YL7BQ6WmpOS8+8WCrS+Z:6Rpd55/sB05lvGQdN7BQHS5ZC9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09114c35b28e96d24e5a7a231dddeca6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    19552bbb88663e8e61dec8714829be7f

    SHA1

    60e2f6ffafd78a48c42b971a9d34c1d4f95d5a60

    SHA256

    d4f4df3746f897725a248eda3458b9116c07f28c1afa116a2ecd7dc239eb4bcd

    SHA512

    4dec96c43e877763483b339449c678b73bc4e86394e0d28b719b814da59fcb64456eb16120d78ffb23e5b5a4c7908ff858fe411ccece93327e493b39c90b0939

    Download Submit