Overview

overview

3

Static

static

3

295dea6b30...18.pdf

windows7-x64

1

295dea6b30...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 18:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    295dea6b307cae4ff91b9626c155dfdf_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    295dea6b307cae4ff91b9626c155dfdf

  • SHA1

    93ba391b33441fb512840f69292e292c88ab0c3c

  • SHA256

    ceee500d4b764d07ecd831587c2e0fa1bdc7e436b0b63378aa895b1168400cdc

  • SHA512

    2526b15b4a255b939009c0e91dd86b0fda32cbbfdcd74da813da1b4942b7e8d85c47942234a907d5f967b8581d27fa5cbb2dfb708ffd217b7dda655f73bb21c7

  • SSDEEP

    1536:1v+PnTZ/ZzS2E0gGUcywjU9zASW3bQWJQVWgERfDZ0jw377W8pO7KgI5:5+fN/Z+Dpcr8zUsWCyfN0S7G7I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\295dea6b307cae4ff91b9626c155dfdf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    336f8588e0e64456f671592d6f2ae2c7

    SHA1

    ec77666499923b7456f0d5a1e805cc15bdd83b01

    SHA256

    79cc3f0b1ca171fc2210d8ff700941572eccd530fcfccf5e63a869d5e83efa1b

    SHA512

    f4d8470cdec3425cb668617e50c2fe07b940f5deb969661edb98f13e2945d485867f96dc1e5793b6c8db11c0e925ed0b66daaf3a8ca1de3b511deab761a1096a

    Download Submit