Overview

overview

3

Static

static

3

e889c7cc25...18.pdf

windows7-x64

1

e889c7cc25...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08-04-2024 22:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e889c7cc25c96b3a5a231adeb94c66b7_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    e889c7cc25c96b3a5a231adeb94c66b7

  • SHA1

    5324c38f043462e62484d23f75aee6dcd83b134a

  • SHA256

    54eba0bf3c329c7dcb733a0e3ff7f5c7a2c4383b506fc77b921e8c88b130c16f

  • SHA512

    7172fdc3e6d47e57ce3d4cbd768cf8e0002b48f169e1d5b38c9a8546bc54108e8911e3b32c420b11c7eb27717854fd75ab469184c8475cc9e6a494b9e6cdd6fd

  • SSDEEP

    1536:Mjtd100/Pvh7ikWGXBgSlI8hBSTEKjX8ynFmd+gWJO27FzHHOYzZnfbLO5ci7ZLg:OXG0/XhxWapSAKjsyFg2l1zZfeL7Z2C0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e889c7cc25c96b3a5a231adeb94c66b7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    cec452f3fb4fbcddf2e25a8cc4e0091f

    SHA1

    4cb212241d668ec2ab429c86cb74121801a90656

    SHA256

    f4dd6ce346e4d03df4721f7071f5c613ac6986942b56463f4759653367f2dbfe

    SHA512

    7ca1fed98e02e418be8a5d865f9e085b644570a885ed41617f85dd74b161751a56c34997d88e56f3774ba2ae9f175973133a0324664730c6c17ad98c2665d8a1

    Download Submit