Overview

overview

6

Static

static

6

2601aed401...18.pdf

windows7-x64

1

2601aed401...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 15:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2601aed401e1c747095d0edf69174d38_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    2601aed401e1c747095d0edf69174d38

  • SHA1

    7bcc22ed443a99720568cc3512b38e0321326e5e

  • SHA256

    b3ca8db32f9fa9c5a74a11ff4ef0c8a7bea402ea93b8e5c685a0318fcd51a332

  • SHA512

    a54b2214f97e8170bad19c97a30267e54af45d27946bc6beee8d1f1040a32c035baf5e45007b8bad991b401fe7ec0f74dd2f6d03924112fc9e9f949842ab7d79

  • SSDEEP

    1536:DuF9uotzB2FaXYWBc9s19GUfbjmuyDcdz4DuTktFxaKMHjrg:SFe9WBcqnFzjmu4cdzWGFKMH3g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2601aed401e1c747095d0edf69174d38_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82e4fb1e14421ac7c9dc13c07bf6ef7e

    SHA1

    81321b2bf1d90360468a2cb6a1f2dde5d0fa391a

    SHA256

    f525c2fec6775122c6f1f8c1884cf9d26b13ef15f54e7d69834f642e4ad0a190

    SHA512

    ae4d5d9d4903724f1e123b970cf358826cc2ef5bf0f657913dbdf946baac2d695cd00f5524b19a5423afbbb3d83b1f6051b7ce6255e05056ebfd0a165ebc692f

    Download Submit