Overview

overview

3

Static

static

3

bed1a19a60...18.pdf

windows7-x64

1

bed1a19a60...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-04-2024 17:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bed1a19a6024d4b662bfb0aebc19a7f5_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    bed1a19a6024d4b662bfb0aebc19a7f5

  • SHA1

    d7350f48c3a836628e2543e1e6c14fb620afec67

  • SHA256

    1b924314bf3e7df0957ed5657ca022fbd0aaa23e39d4d829a1640e8ce8ea06da

  • SHA512

    54f8d221b4ce93af1f8e83b7ba2654ed6986a371b379e1c6acdb4abfd5740ac93298583c3609bd5a3f8a9e3ef1f25fb3fcc999a095975931f7201a7b04f29b97

  • SSDEEP

    1536:3/mvBbblVWzvXMeLYhlEeXcv5KxpdY7HZzUpdyBEgMcWOpOaZEWL94kQnrO:ObujHMlE5v5sGhUp1gMZaZWkQy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bed1a19a6024d4b662bfb0aebc19a7f5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    781368c8b4e4b681041f2dbc07de8ef0

    SHA1

    d3a0f2359bbbbef546aa0077fad7d71ea3795076

    SHA256

    475e9526434e1fd30c8ad28030dc23eaafa7f812fda5227d923e8113df56b131

    SHA512

    53d95aa3b52c98eaeae80400020014cc00df0dd9f6bbe9b0b349653f32f3822b42cce9847e013b479e91afdb3309b1cd3449fab2bb87187e7bd0ce4156658a08

    Download Submit