Overview

overview

3

Static

static

3

d1c5277249...18.pdf

windows7-x64

1

d1c5277249...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 10:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d1c5277249a8a696185dd3636ba52697_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    d1c5277249a8a696185dd3636ba52697

  • SHA1

    f6b86018bdbb33371c6956763ec29f1653f6765a

  • SHA256

    d7d93ee9491d4314ac6e3c69edbefd82512d4b93be3c1fb98c38d1e94e9b8b5b

  • SHA512

    b0e9644e6d441dbb9e61998ffb83cd9f3423185dd6957ea5eecbbe60c359bc5a1b7140ca7efdd2eaccc88802bd56c577cab5eb6f644e895972b10f8aab4dc84e

  • SSDEEP

    1536:BTdHIVHDQUmyrAvLLlBjnFQDPinPN+BvcwWvTik/jWypOlL5hMrLryO:bUHDfmyrAjLTjFQri10vIvclL5hMXT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1c5277249a8a696185dd3636ba52697_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    20c82450f66e07b362e9c6d679cce624

    SHA1

    ae418dcf6eec1f997e6f02d4b4b96696deafb4c6

    SHA256

    d41d7bc12b38d71dc84ec6b3c34711131721eea3d48603271c55ecc341d4e7b4

    SHA512

    a7545643c2dd0cd57ffeae63adb94259491414273410219a1b944c631b036780e52280d6d8b7361949f28478b72a216959c3e4127d1cdf1ac22b083c0bd7120e

    Download Submit