Overview

overview

3

Static

static

3

d2ba6006ec...18.pdf

windows7-x64

1

d2ba6006ec...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 11:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d2ba6006ec30bdd3149178aa6ac8fb7d_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    d2ba6006ec30bdd3149178aa6ac8fb7d

  • SHA1

    35b6818c3d580cf3302a200aadddfebeb505091f

  • SHA256

    7eb8b06253df0b253baf0c67ca316f2776f556a22ec8dcd2a8c180a56ef4cc1c

  • SHA512

    d9c9e94aed798c15e1e446f178ebd02868635b180491017fb9f893d8ec97d36cdaa0d3ffe05794ca168f1418f0da10c9538f113655066ba46dba1ada1a436bc9

  • SSDEEP

    1536:czW4tRbg+ooU5CBvQH6AUJj++58a8XMR/8Duf73lf48dWxApOG0AaNpWiERtfV2i:0Wkpg+ooU5kg6AUd++5j8XMyuf7+r3GN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d2ba6006ec30bdd3149178aa6ac8fb7d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    533a55260e7675ef76902fb55611f3ec

    SHA1

    729f607f8f6106049b659848eae241654e364813

    SHA256

    a6693e89f318b94031b6de0814faa6a831506a768fb188d9e5f56164e7ebed19

    SHA512

    9b0d476551719213b9d3577672d7ec521b9735b811f09dc03fdba2a5bed9502c4debdcfb8f9d771239f608f1a36dceee9f3ec0ec4fe67adaf3cacc6497597bf4

    Download Submit