Overview

overview

3

Static

static

3

df956b0337...18.pdf

windows7-x64

1

df956b0337...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 08:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    df956b0337980cfa715f79e12fb6f7bf_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    df956b0337980cfa715f79e12fb6f7bf

  • SHA1

    f46a852d106d790a92abf6ac5e06d4ce93cd0a79

  • SHA256

    0b6c9045623a1e90503a084d876e49f1673082d288f75a3b4df23bd9ec077e74

  • SHA512

    e3e2f52de55de4fdb3bae6ddc5f7a387b9be955398a8cc5b1cf16a1d7a8c1f44b5bed86ce60f68c90a3109d11d8272c977623e375c625e8da9b628921bcabc2a

  • SSDEEP

    1536:xygYlguwLngJBGwHinady5W5TW1+uGTs6WOpOwrt0VSXMbWgJcMkpk:h7DngJBGwHiady5W53CvwrqV55Jce

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df956b0337980cfa715f79e12fb6f7bf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e29205cc9c37c591916d2b4109f9d23c

    SHA1

    29fad7eb04690410ff36d27c60cad05b7857309f

    SHA256

    68efbd56e95911ff052c6a1330f1e603bfa23d8bc3490efa2b3fc12a85378e6b

    SHA512

    32b8aea7a70e11c05cbb70e6d4b4eb02f35a4bb333378dd26043c5cfd9cbf8c76ab125fa185da45628521231965e38319b7c202301a163d6af59223b7f9dc9e6

    Download Submit