Overview

overview

3

Static

static

3

d3951b1e25...18.pdf

windows7-x64

1

d3951b1e25...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 12:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d3951b1e25d6f808164af2ac8c9b45c3_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    d3951b1e25d6f808164af2ac8c9b45c3

  • SHA1

    c61498391e38bcad1e44f6f986527be5fc2f6208

  • SHA256

    5b775b7dbf4879573b5ca476197007ae4e1df3846369294615be2e416c5c7a44

  • SHA512

    c4970b55f8715916c35bdf06aff935bc18d9bcf41f56419d6dbfe5ce429ec488c171c0f0bb3fabf7a1cccb10dbe8630d18edfafdccaef4a6ea8c85aa970508d2

  • SSDEEP

    768:PrvzqGw1oNJsJ+3J/8vDWdn01lTBHyIohpaBHPT+20kbXmrAhbyhCXtI5mkj/WT:z7b+oks1d0rklhorNdbXmchbyMXu5mXT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3951b1e25d6f808164af2ac8c9b45c3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    13e644679e5ec547d0e0fc2d8b24935e

    SHA1

    8375cdfbefdd8b2d76a28bf5c7d0053b55d17631

    SHA256

    24d0a95961d0cb38bd54beb0ca0e8c31513a3ae22a64ae4a573e7566c1e124fd

    SHA512

    e02663780fa8c10ac29839da23d66eb28e40f31590d2cdaee969631b24cd0c7c666d387a0035c609bfd0eaa8eb752acee880cc72bdb5a42e0a8b55859f547327

    Download Submit