Overview

overview

3

Static

static

3

f036a54c3c...18.pdf

windows7-x64

1

f036a54c3c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 03:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    f036a54c3c0586accf4e53e3d732b88e_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    f036a54c3c0586accf4e53e3d732b88e

  • SHA1

    326c5d4657579f857db38bbe46ca5f71a0cfdb60

  • SHA256

    8f2ee3dc26a44412e412242fa964b272f3d9279baab991c1e2c99ba650ffce5f

  • SHA512

    57c51dff34751e4032043bc6db5ea89159910813e22fd2fa7622cfb8b579e1a69ff8cec6c12a9180b9152ed269ff438f4066269eea5818ed45942f32b77b1437

  • SSDEEP

    1536:E4sbC40KGzasPMZjkF9V5BTbHSWLrTxmMIlwKHNzIrQLWQpOCMIa:DCyPqoF9V5tbZwMI6Kt+Q2Co

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f036a54c3c0586accf4e53e3d732b88e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          7387f7971cbb0bfc444c0f1afe08fa66

          SHA1

          6cd2aa08385debd0330cfb2d4f5d213475a4351e

          SHA256

          99a992d106cffc2742b1ccef22cda2ce2cb99981b00fae7bf34394c05153089d

          SHA512

          40a2cb0471875b4e8c9b5102cce3f01cd8383cb7eb5534fd8763553af5a3f63c99d7d98cc871204e380dc79f3620861964ba955e72e347c8d0e7fb993e4e6f80

          Download Submit