Overview

overview

3

Static

static

3

0d357026fc...18.pdf

windows7-x64

1

0d357026fc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 18:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0d357026fcb18c7a5b491c1978818f71_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    0d357026fcb18c7a5b491c1978818f71

  • SHA1

    386d9c5199f16bc7978f174778a1e980df69ec25

  • SHA256

    8caa0253d6f8aba38a897152e81881d72c9c02e41962263ea54788787beb455c

  • SHA512

    75e0189b83359dd16883f67a505c4beb5e820e20815043d4c333768ff429c3662c0620aee6e3f0fa4cb414b00da2869a269eb950a6385bf47660e813b4c8f46e

  • SSDEEP

    1536:GVKuF2Hzw1ub3CwXswKMaxjzcAikbga9Ri4CibWtluHAWapOtQUvx6HQ:kF2Tws3v8wKnpznbga9zCiAluH5tQU5N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d357026fcb18c7a5b491c1978818f71_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    204bd2be6b28c806c44166e8e3d5f52b

    SHA1

    3cf1165fc430923633cb3c563ed86cb6822905f3

    SHA256

    82663e6c8e775e8e48e312c1310c86f1af7095bafbce55d5ae48b6c0d9987a96

    SHA512

    4f38dd9bfe40bd3ddfce04e91bfc02db3f0095aa7abdffdad7bdc19c5f815d46079e9b3626edf92bd48ce9d22e430c5e29b4dd8be8f8da621cec2fa2df388eae

    Download Submit