Overview

overview

3

Static

static

3

c2a423fb92...18.pdf

windows7-x64

1

c2a423fb92...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 21:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c2a423fb925bccea20e7e0b5d4a09963_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    c2a423fb925bccea20e7e0b5d4a09963

  • SHA1

    0131b95f58cae1d64c4421851fc06c2824001093

  • SHA256

    afdef21501eb80c95f7df211410ab84fb4a44c811e714d55a7e9383c3ecd593d

  • SHA512

    fb183f9a2ad921eec97dfaf1ed5aa165b1a1a180f17acf6021497ba57a9bd8d9ade5a4086d8b6a649336c4dd41e226b601a986566adf1e1bbb76dfc34c11f03e

  • SSDEEP

    1536:++6NqWemsA3JxY8/U8a5myJxp4BTfsQPWCpOViwksfcEacWgJg64Tf4/G8W:X6MpM7YC/Kj8QHViwksNaEJgQy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c2a423fb925bccea20e7e0b5d4a09963_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    785c5b421fe36877c7813333bfe0a1e6

    SHA1

    d1d3014dfefc146dcffee43a48ac7cd9ec7e2a2e

    SHA256

    87016cea28c42eb721519abe4a3949b663aaed54d9424f229aeac3b0f3b6544d

    SHA512

    dddf7c67cf311cc2907c4a83fe680db4a3ec36857b9f002cc5d3fc81387afc909b582c2931bb5eb92ba99fdd0420ed3cf3ef65e8c407d3f987aa441930effeaf

    Download Submit