Overview

overview

3

Static

static

3

1cbac94274...18.pdf

windows7-x64

1

1cbac94274...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 07:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1cbac9427430ce192ed6290d867c31a7_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    1cbac9427430ce192ed6290d867c31a7

  • SHA1

    7db0bfdcdf34ea721172e089350643d939120207

  • SHA256

    e5b11b2971e35958213941274ac388e73c2e3632697fe3309bbcca5c79da316a

  • SHA512

    10cc7e09384e4f713d5bff8cfa7b928b1b47e2eda9b62c7afcdc080041fce014a0a1d0fb5bb7230af920814c838d6af76f16a201afd56b59d26317dd53bf852d

  • SSDEEP

    1536:qJ3qjNqnmNyF8OZJ0i7EPtzM2PUNDkkqPJiW+n5rYDwoWApO6L/j:EUNtkF8OZJ0i7WtJPUNfsJSrH6P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1cbac9427430ce192ed6290d867c31a7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2c7f3045b14bd951090766242f8ba989

    SHA1

    6a7da3d91bf9ccc15fb17d3825fae1664f5a836e

    SHA256

    f04921f6f142718eb0859d0fab3f822c3c4af4857ed2a71d1217b8bdd532d4b1

    SHA512

    69d83e94381da9cad54c3268461667ff57d5fd91cfe1ed33098b35f0eb5c328d6f413188c9b842aea50d2e2d8559e949b4f44e2715e221594d93da71e5a4d604

    Download Submit