Overview

overview

3

Static

static

3

eb4ed5bc42...18.pdf

windows7-x64

1

eb4ed5bc42...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 14:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb4ed5bc4210fa840075cb8fc14e55ae_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    eb4ed5bc4210fa840075cb8fc14e55ae

  • SHA1

    b9b9217dcc54f631f469f510f1662672801ff6b5

  • SHA256

    411d476b2063204893bb79085efeb0bcb0acc3c6f57dd15f2a9e16829e25f0fb

  • SHA512

    d1c7eae03e0f9c186196d9ceeeb81f621f29b31e7bb3ae99afadb257f8f7b538d04de8eb65d82bb647bc1340c93d97d73c28c788c8efc12b022ac1eab852d7fd

  • SSDEEP

    1536:iRVJzLoF9LFZRo2HFUUd/oqHoC9qTWilZnwMWOpOaZiglc7cNT0v:uP/6LFbR2G8ZD7wJaZbc7Mc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb4ed5bc4210fa840075cb8fc14e55ae_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    88473c5a7200da72149138fbb8a0e39a

    SHA1

    7c0877ec02f9ec24b690093f025a29e1547f5243

    SHA256

    1f411b8e6347ad85711b0fa35374edcbd0faa96d685ecef1d7593eb412b4d76f

    SHA512

    c3551e36842306a60b4a08ce4400a6451f473a8d647d6bd0c1b8d76d07449a356c19ad415604a99a47b33a497c301f8238b0f10424fa753271477b8b0d39388d

    Download Submit