Overview

overview

3

Static

static

3

1bb3bcc2f7...18.pdf

windows7-x64

1

1bb3bcc2f7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 07:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1bb3bcc2f704ee8f5ed3e365a211119a_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    1bb3bcc2f704ee8f5ed3e365a211119a

  • SHA1

    20383438ece14a7390dedcd4e9fa1649d1a811f0

  • SHA256

    82f725d16559eba76327b71167c65c31e32e333a08b71866f5e8be5ad9c0a97e

  • SHA512

    1a76d9de6297ad490f7cd9034e3904f136b8d2cefbce4d99900b00cb85f4fd073f38d66e7cda7c20ee964d3a966bfd0ce34376fb4877d15e52b694e198912c36

  • SSDEEP

    1536:4LX+nL0LKdrU6CdZ4jdjnwaNKDuYdZljx+z40/g9iN4Jgb9uH+1XdW0ixUvJLWAV:MX+nI+4jZMwaNKDN5x+sNi6JgbG+1XjT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1bb3bcc2f704ee8f5ed3e365a211119a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    94beefc7c447c33f2df8806bf04e9b67

    SHA1

    2a696f87a3b4268806dff2d5ebcd67960e43d2be

    SHA256

    47e66687c97fd862c4906a622f85d130ec2d694037b6fc1bea92898266d566bf

    SHA512

    842473a498d3509e01f2552e1a4e38d4d08e94468febe17e3df1313aacc979e8dde2b67378e37eb76de9a6f84e25cde13a3bde4f5e0124b74f87248996ccbfac

    Download Submit