Overview

overview

3

Static

static

3

0f952ca41e...18.pdf

windows7-x64

1

0f952ca41e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 20:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0f952ca41edd54f10fbb34a428c8957b_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    0f952ca41edd54f10fbb34a428c8957b

  • SHA1

    782a976878dd5f679c01f7716995e167c136c29a

  • SHA256

    7c1c3a646a25d22d63bc4e99721b82eb3394e75ce7abc4c674850b8644d31bb4

  • SHA512

    f47b875bcc3fad7d5e642db666d8e23782c9fdb2d2bf27de62be02dc454a2c7a5c19db7ea141bbbec3cd2ab1e038cf09613ce42c93ff1f56afa5f027e7b63840

  • SSDEEP

    1536:yQuywICGUZXYStPbpsPvKjjQYWnXWg6JL5DiNp/47/cUWspO2rWbUTeV3VhBkKpP:vuhIcdsajYXWg6JL5upQLcX26V3VhOK9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f952ca41edd54f10fbb34a428c8957b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    16986c2ac289d8c39ef0f81f2c441b86

    SHA1

    dcd968f9cc6802392edb6437d66bb1d84cf5859e

    SHA256

    b3fb7502424b92cf14042fd35dd4b3bc5f155675fc210d439342d752e0577d96

    SHA512

    ecfca533ea9d61f597b293dc3dd8e775b22b35b04fb854c4c14460c7bcb3ff9b612a71c156dc125344b6d522c7dd6b17ac1b084821b54f2a606442213ba5a291

    Download Submit