Overview

overview

3

Static

static

3

d711eb5ecc...18.pdf

windows7-x64

1

d711eb5ecc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 15:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d711eb5eccfa26e7f87e567c80b0781b_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    d711eb5eccfa26e7f87e567c80b0781b

  • SHA1

    ad14180985515247c13364ddfd79edf0e8111196

  • SHA256

    279e112003bb06e07c86120cd3af99c2e2690b5f17d00b17af8b84da4b0afb28

  • SHA512

    b7db69354eb5c8f50d5fd00a56939229917db636bbba40b71bb19d37313ed5157336a2e9924a7c269edcf8b558b025d0de5bbbb5a4f6144c9795057e41231e0c

  • SSDEEP

    1536:DPIrrNk3ZksNXuOsS+RFTdjk+c3pXy2AclpZnJEW5ActL5N/zCWUpO7XZTX:LIry3q6yPTlM3pXfpZJ3/z97F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d711eb5eccfa26e7f87e567c80b0781b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d2f7f533f62560e1ff74e36b2a11de98

    SHA1

    f5b1e76a1331e63cd47b645d718b2e6cccb9c477

    SHA256

    fdf85569d5500457bc626dbbd5b60b16f4a4861083dce38618c98913a717b5db

    SHA512

    49c29e512bb1d3d188345202cf77dbde1c9b65462b6524103083e1dd03da8042dc647fdbcac84c2fff9975d5ceb20e65bf02e8a5412a2995b8532b44c3bdd937

    Download Submit