Overview

overview

3

Static

static

3

d06a380d84...18.pdf

windows7-x64

1

d06a380d84...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 09:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d06a380d84a9eb1fa2628f3d0c030284_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    d06a380d84a9eb1fa2628f3d0c030284

  • SHA1

    5737c10952f0920b0a2721a784c90beee451e4f2

  • SHA256

    c220b3d0861a10850eae1dd8261b8f82e73f27bc5341e38436424a53315abc5c

  • SHA512

    8f1494445fdd4d8df4ac89d3b71e62778bd9ed49978ec0cfc9c7b1eb14488b46066aa8d423de9f197cd2d3c43a4cf11a95352e1d3c750918bd3c400cd6041729

  • SSDEEP

    768:pme4yOrDB+AhuQLfWzqrBE4IF22PWax9/u1iuE12uG0pQW/K71E:YRyCPYcrB822ua6alpQR1E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d06a380d84a9eb1fa2628f3d0c030284_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4ed5b4b346d6f18b1e936c5aa49e0443

    SHA1

    602d0ef80ab67a39973598d335e77c931bd291b2

    SHA256

    4e8530f8acf326cad31f5d0a42c2c0b96f5a20e00542d4bd0fdd1cbe4ebf5b8e

    SHA512

    01eb2924885cdfc16c14c1d5b0a86aee88f4384e467bd8e1c1515e943e08f0a1d455752e52e83c34572c6a7205fd0acca8a14bcdc226bb28a31ce572211c46ee

    Download Submit