Overview

overview

3

Static

static

3

c1aa2b6810...18.pdf

windows7-x64

1

c1aa2b6810...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-04-2024 20:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c1aa2b6810dd8e0523e20f97945bfd37_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    c1aa2b6810dd8e0523e20f97945bfd37

  • SHA1

    7d0a997cebcc27009c4fe2f6b6b9b50cc6a1ba15

  • SHA256

    369de12fbf9d082570a0875c78678519d0015ec28ffd51c1f1d81790ffcc2085

  • SHA512

    9324801654f77abf80350977c0c75f1ea6192ef5c564ee15f57c9eca93b00ec31daf081499ea6adb0a9bf60657425c9b5759185c7ab8d0e66a4e94d41c0cde40

  • SSDEEP

    1536:1JbV4xXXw4z3Ju03H0tEn6CZSmFEi76zhNWCpOVi7U5QU2WwxBbW0Tzp:1H4xXXjz3JV6CwkMhaVidUc9Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1aa2b6810dd8e0523e20f97945bfd37_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f92de191284c631f76e8a19dc7ca599d

    SHA1

    2ad4f60dee24bee6b08cfe34c2eb444cd8d567c2

    SHA256

    087795fb68cfaa996fe6c8610202dc91df2f64b24a27585641f3d35298500798

    SHA512

    e8a9843b3a121ed006a286d8e126288db32e8b505f4a31af4e865de360c0d6ad46621f710dbf9678c1f98711fcff5bbead1e9d960981eb1604922914d8607929

    Download Submit