Overview

overview

3

Static

static

3

f79892e0ba...18.pdf

windows7-x64

1

f79892e0ba...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 08:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f79892e0ba1dfcc9a71dc6311da999eb_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    f79892e0ba1dfcc9a71dc6311da999eb

  • SHA1

    22cd2aeea394765d80b8c22991f27f89b8c03e10

  • SHA256

    683b399a9186d5523faf92ab97d29d727a27b5b5bd8679ecd1daf1d87b3c2d5e

  • SHA512

    b14b7dbb494e3a715afc7fc6b78812d95cc4de29ebb4d311cf72ec1216f5d4d550ce16def603931a8789e8145af32c5ae3d2cf574f9edb92194de85a734f4173

  • SSDEEP

    1536:aJ5Zj2kOYulFroZQIaaeR/MVmQMd/HIMc0uLyUOcAtWCnxzwiQ9I/W6pOu2kqLV0:cOkOxlFroZQsBVmLd/HIMgQxnicUu2kd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f79892e0ba1dfcc9a71dc6311da999eb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b459c32711c5f7bb2f6da3c631445824

    SHA1

    37d3554223df981c0b02971ae03a752db0caa150

    SHA256

    7abfa9ee26844e36903f1f7a829de3d51f87fe7d08938ab3283427cd64816fe9

    SHA512

    57893b34f0f27f999dd8e8fd764544a42b59758c36f23c63b5655e27e21439b1939c4a3cbc1f8b9c162763432831e795f5d957f8dd6ddb2c407b9263464bfb4b

    Download Submit