Overview

overview

3

Static

static

3

da2e20c384...18.pdf

windows7-x64

1

da2e20c384...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 17:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    da2e20c3847223d9849ef340dbc0baa4_JaffaCakes118.pdf

  • Size

    101KB

  • MD5

    da2e20c3847223d9849ef340dbc0baa4

  • SHA1

    d4425e880b0c6d3184c0c84bbd1ad6ef5ea8c4f4

  • SHA256

    305f2a7e6c1863bcd4bdd32c5d30f501d49fcf0f410481c0f4fc574268c699a9

  • SHA512

    6231cb34ecd48166199581ec5a71585dacc36b6f8a24cd550c7524c24079b27929a9e7d8438713ea1a47e5480822195739d5e8588cf57a67973a1c61de09c82d

  • SSDEEP

    3072:lLEF4ItdomZuCxI3tNldWGHpGMpf5Wmzy0aa:SuMdoYxmMMpt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\da2e20c3847223d9849ef340dbc0baa4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          a3302627890a43b6b51753abf1ccf9c4

          SHA1

          36d555c0caa5d76c97df976e1a2a3258a836e0ef

          SHA256

          35a15d85a4196bfc1c57bd4bf7005baff92b2732fb1bbe830dfbf6a9b2d4e3bd

          SHA512

          5670ac49971cf901527d2445e5a87e1bff719df900633ea240396c6fff2198c38068db80e1b71a970059f0b538778003cd7e684aa1530a4f233b726066c47733

          Download Submit