Overview

overview

6

Static

static

6

2957971d77...18.pdf

windows7-x64

1

2957971d77...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 18:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2957971d774ae152a8e42d51bd5237d7_JaffaCakes118.pdf

  • Size

    62KB

  • MD5

    2957971d774ae152a8e42d51bd5237d7

  • SHA1

    d1760bc3ab0c0c910bfeb3531b008ea373325799

  • SHA256

    00027662696d541d49d35799101bec92b824e7cea736cbf295447d0590a7c8c9

  • SHA512

    56cee4cbc5ebddc969bf673b266d7fce05895f524051c1de51b3aabe9a70106040921f25c79805598e055cdc522d34c53677b0261aae7881151dfe854ac51ae6

  • SSDEEP

    1536:TYEPORC8501VZn0+l+GqT1rDTHj3FebXSBAz/Wur:c01VZn0+pqT1rDTHjFebsAz3r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2957971d774ae152a8e42d51bd5237d7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    87873c40a4cd21445e09c70f42f66ed2

    SHA1

    2191716892b534db1e7e44e8f767a33b0ddda8dc

    SHA256

    2d6594039bc68866b85bcf4fd1ae13d9a52a1f6ec40881a7d0bd5c7d64f2162a

    SHA512

    600e70df22203b84c3208f77a7e8cceb400d8c62706bd7bddcb58906d657160327c50844d61a2e94ddaa52fbdf9ae4ed5bd2a92286d4cfb83ffc747b1c95363a

    Download Submit