Overview

overview

3

Static

static

3

13800dc221...18.pdf

windows7-x64

1

13800dc221...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 00:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    13800dc22105f09f7fea426571089950_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    13800dc22105f09f7fea426571089950

  • SHA1

    b79e474bf53efcca4f57f9772934aba20a269cca

  • SHA256

    2ffd67c785ee143f7086b664ecd161021b4c133286c35a7814540a505267a5ed

  • SHA512

    54e411feac49309f2f657ec57ae2fde69279fe9c64bcd0b81543c62f1a60ec685c12e052d4ece5e30587c3e06d025f4210bcf8950d570216ecdab8da81d5be98

  • SSDEEP

    1536:br+79q3GXdkqR5i0M/qXMfpCfDu9bAdaobUMf2r6Wp1quWspO22x7:P+q3qqqR5fM/mMfh90d1r2rRq922

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13800dc22105f09f7fea426571089950_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    dd504369d6993105ad96025b780f5307

    SHA1

    43901a6e36fe7c24d96ced723d38ac277ab657ca

    SHA256

    fbacc8b93a330d7fce9fb729a133e4870beeeb5318545f441753f2e0812ef90e

    SHA512

    2f9ef734b4581582920553c06ee5ecb847cce139ad0701526868419ddc30205fe9be7b0f591fbb8cea720fa755e24d95a1dbb78fd1d07d6fcdf942d0d17f9179

    Download Submit