Overview

overview

3

Static

static

3

273d676239...18.pdf

windows7-x64

1

273d676239...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 16:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    273d67623907cbd8099ce4210b57db6a

  • SHA1

    035b86bab75a6d17a9ce56a7f8cccdf7a7a2ca51

  • SHA256

    46e8a34be8cc2dd2d24449fde0c76568a32362937135ca2017b3d7e9076fbd7b

  • SHA512

    fa9235b808ff5ab9ec827061ac4343b8407239c847c6fb132881fe95e350bd890d5e58a73dd86bb47f7c45618e506cb52940240f9f3c3415fb565d04ebd3be7b

  • SSDEEP

    1536:lVG3ZkMBeSxVhqOrHg8b2FdxwLF6qFPWVLJmzcW6GwWQpOC/QlB23:mZdBeLOrAk2Fdx6UQ4JmZ6GfC8I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2696eba56211102335a9ab8544dcc5c2

    SHA1

    4274a7e7082294e0293d436fdad6ec77ab3e34f5

    SHA256

    bcad1068eee83eef8d3bc05423cd60035fd35d75afeb4ad7806cf5d18f787c22

    SHA512

    02af54e7000483b4521dcb16bfc238bdfcf3b24865a80061dee818152d9b266bc252ab7f27fd74a31734b29f62c4f7974890510a582c04b77ab21b04ca0bbe7e

    Download Submit